Arrive - Senior Product Security Engineer

Arrive; Bengaluru; On-site; INR 1,500,000 - 3,500,000; Full time

Job summary

Arrive is seeking a Product Security Engineer to strengthen the security posture of its applications and cloud-native platforms. This role focuses on proactive security testing, vulnerability management, secure SDLC integration, and collaboration with engineering teams.

You will conduct manual and automated security testing of web apps and APIs, assess cloud configurations across AWS/Azure/GCP, and produce clear risk reports to help protect global mobility platforms used by millions.

Qualifications

• 9+ years in application/product security or offensive security.
• Hands-on web and API pentesting experience.
• Proficient with OWASP Top 10 and API security.

Responsibilities

• Lead security testing of web apps and APIs, both manual and automated.
• Perform threat modeling for new features and services.
• Review secure code and remediation recommendations.
• Assess cloud configurations (AWS/Azure/GCP) and IAM policies.
• Prioritize vulnerabilities using CVSS and track remediation SLAs.
• Develop scripts to automate testing workflows.
• Prepare technical reports with risk articulation.

Skills

Application Security

Product Security

Offensive Security

Penetration Testing

OWASP Top 10

Web & API Security

Cloud Platforms (AWS/Azure/GCP)

Networking & Auth

Scripting (Python/Bash)

Tools

Burp Suite

OWASP ZAP

Nmap

Snyk

Checkmarx

Job description

About Us

Arrive, including brands like EasyPark, Flowbird, RingGo, ParkMobile and Parkopedia, is a leading global mobility platform. Present in over 90 countries and 20,000 cities, the company helps people and decision-makers make smarter decisions about urban mobility and ease the experience of travel worldwide.

About Us

Arrive, including brands like EasyPark, Flowbird, RingGo, ParkMobile and Parkopedia, is a leading global mobility platform. Present in over 90 countries and 20,000 cities, the company helps people and decision-makers make smarter decisions about urban mobility and ease the experience of travel worldwide.

Role Overview

We are seeking a Product Security Engineer to strengthen the security posture of our applications and cloud-native platforms. This role focuses on proactive application security testing, vulnerability management, secure SDLC integration, and collaboration with engineering teams.

Key Responsibilities

• Application & API Security :
• Conduct manual and automated penetration testing of web applications and APIs.
• Identify and validate vulnerabilities aligned with OWASP Top 10 and API Security Top 10.
• Perform threat modeling for new features and services.
• Conduct secure code reviews and recommend remediation.
• Cloud & Infrastructure Security :
• Assess AWS/Azure/GCP configurations for common misconfigurations.
• Review IAM policies, storage access controls, and container security posture.
• Vulnerability Management :
• Prioritize vulnerabilities using CVSS and business impact context.
• Track remediation SLAs and support risk acceptance decisions.
• Security Testing & Automation :
• Develop scripts and tooling (Python/Bash) to automate testing workflows.
• Collaboration & Reporting :
• Prepare high-quality technical reports with clear risk articulation.

Required Skills

• 9 years of experience in Application Security, Product Security, or Offensive Security.
• Hands-on experience conducting web and API penetration testing.
• Strong understanding of OWASP Top 10 and common attack vectors.
• Experience using tools such as Burp Suite, OWASP ZAP, Nmap, Snyk, Checkmarks, etc.
• Experience working with cloud platforms (AWS/Azure/GCP).
• Strong understanding of HTTP, authentication mechanisms, and networking fundamentals.

Why Join Arrive

• Work on global-scale payment systems impacting millions of users.
• Be part of a growing India engineering team with strong ownership.
• Collaborate with diverse, international teams.
• Build technology that directly improves urban mobility and sustainability.

(ref:hirist.tech)