Application Security - Design Reviews Threat Modelling (PSA)| Remote

SRM Technologies; Chennai District; Remote; INR 1,800,000 - 3,200,000; Full time

Job summary

SRM Technologies is seeking an experienced Application Security professional to lead threat modeling and security design reviews across multiple clients in a remote role. You will partner with engineering and product teams throughout the SDLC to reduce security risk and deliver practical guidance.

The role emphasizes security tooling, documentation, automation, and collaboration with AI/ML features teams, with a focus on secure implementation patterns.

Qualifications

• 5+ years of experience in Application Security, Product Security, or a related field.
• Strong understanding of OWASP Top 10 and API security concepts.
• Experience in bug bounty and manual source code review.
• Experience participating in security reviews, threat modeling, or security assessments.
• Strong technical writing and documentation skills.

Responsibilities

• Participate in security design reviews and threat modeling exercises for new products and platforms.
• Identify security risks and recommend practical mitigations during design and development.
• Serve as a security consultant for product and engineering teams.
• Review architectures, data flows, and deployment models for risks and secure patterns.
• Collaborate with AI/ML feature teams to identify security risks and secure implementations.
• Develop tooling and automation to improve threat modeling and reviews.
• Support security incident investigations when needed.

Skills

Application Security

Threat Modelling

Security Design Reviews

Security Documentation

Security Consulting

Tools

SAST

DAST

SCA

IaC scanning

Job description

Application Security - Design Reviews Threat Modelling | Remote

About SRM Tech

SRM Technologies is a global digital and engineering partner delivering capabilities across data and AI, enterprise platforms, embedded and platform engineering, supply chain, and design-to-manufacturing services.

We work across high-impact industries such as Mobility, Life Sciences, Healthcare, and Logistics, supporting enterprises across North America, APAC, and Europe in building intelligent, future-ready ecosystems and driving transformation at scale.

As a Great Place to Work®-certified organization, we are committed to creating an environment where people can learn, grow, and thrive. We believe empowered individuals drive innovation, deliver value to customers, and play a meaningful role in shaping our collective success.

At SRM Tech, every contribution matters, and we are always looking for passionate individuals who are eager to shape their careers with us.

Location: Remote

Preferred Experience: 5-8 years

About the Role:

As part of the Product Security Architecture team, you'll help reduce security risk across Multiple clients by partnering with engineering and product teams throughout the software development lifecycle (SDLC).

Our team focuses on security threat modeling, and consulting. We work closely with product and infrastructure teams to identify security risks early in the design process, provide practical security guidance, and help teams build secure systems. We also develop tooling, documentation, and automation that improve the efficiency and scalability of security reviews across Multiple clients.

This role is ideal for a security engineer who enjoys solving technical problems, collaborating with engineers, and helping teams make informed security decisions.

Key Responsibilities:

• Participate in security design reviews and threat modeling exercises for new products, services, and platform capabilities.
• Partner with engineering teams to identify security risks and recommend practical mitigations during the design and development process.
• Serve as a security consultant for product and engineering teams, answering security questions and providing guidance on secure implementation patterns.
• Review application and system architectures, technical designs, data flows, and deployment models to identify security risks and recommend secure design patterns
• Partner with engineering teams developing AI and machine learning features to identify emerging security risks and recommend secure implementation patterns.
• Help maintain and improve security standards, guidance, reference architectures, and internal documentation.
• Develop or enhance tooling and automation that improve the efficiency of threat modeling, security reviews, and risk assessment processes.
• Collaborate with other Product Security engineers to perform application security assessments and investigate security concerns identified during development.
• Contribute to developer education efforts through documentation, office hours, workshops, or security awareness initiatives.
• Support security incident investigations and root cause analysis when application security issues are discovered.

Requirements

• Available to work until 11:00AM Pacific Standard Time (PST).
• 5+ years of experience in Application Security, Product Security, or a related field.
• Strong understanding of common application security vulnerabilities (OWASP Top 10, API Security, authentication, authorization, secrets management, cryptography, etc.).
• Project experience in bug bounty and manual source code review is a must.
• Experience participating in security reviews, threat modeling exercises, architecture discussions, or application security assessments.
• Strong technical writing skills and experience creating documentation and guidelines.
• Strong communication skills and ability to explain security concepts to engineers with varying levels of security expertise.
• Experience working collaboratively with software engineering teams to identify and address security risks.
• Familiarity with cloud platforms and modern application architectures (AWS preferred).
• Ability to assess risk, prioritize issues, and provide practical security recommendations.
• Experience reading and understanding source code in one or more modern programming languages.
• Experience building scripts, tools, or automation to improve engineering or security workflows.

Preferred Qualifications

• Experience with threat modelling methodologies such as STRIDE or similar frameworks.
• Familiarity with AI-assisted development tools, AI-powered applications, or emerging AI security considerations.
• Experience creating technical documentation, security guidance, or developer-facing educational content.
• Exposure to security tooling such as SAST, DAST, SCA, IaC scanning, or vulnerability management platforms.

SRM Tech is an equal opportunity employer committed to diversity, equity, inclusion, and belonging. We make all hiring decisions based on merit, without bias or discrimination, in line with applicable laws.