Digital Technology Specialist - Product Security

Baker Hughes Company; Bengaluru; Hybrid; INR 2,400,000 - 4,200,000; Full time

Benefits offered by this job

Private medical care

Life insurance

Tailored financial programs

Work-life balance

Job summary

Baker Hughes in Bengaluru invites a Digital Technology Specialist - Product Security to lead security across software products and development ecosystem. You will identify risks, perform security testing, and guide secure-by-design practices.

You will work with DevOps and engineering teams to embed security controls in SDLC, support AI‑assisted development, and mentor teams with secure coding guidance. Ideal candidates have 5–8 years in application/product security, strong programming skills,

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Software Engineering, or related field.
• 5–8 years of experience in Application Security, Product Security, Penetration Testing, or Secure Software Engineering.
• Strong understanding of modern software development practices and SDLC.
• Experience performing manual and automated penetration testing.
• Experience securing cloud‑native and containerized applications.
• Strong programming or scripting skills in Python, Java, JavaScript, C#, Go, or C++.
• Deep understanding of OWASP Top10 and API security risks.

Responsibilities

• Perform penetration testing and application vulnerability assessments on web, API, cloud, and containerized applications.
• Identify, validate, prioritize, and communicate security vulnerabilities to development teams.
• Conduct threat modelling and security design reviews for new products and features.
• Drive remediation efforts and provide secure coding guidance to engineering teams.
• Embed security controls throughout the SDLC and integrate tooling in CI/CD pipelines.
• Support security automation and policy‑as‑code initiatives.

Skills

Python

Java

JavaScript

C#

Go

C++

Application Security

Product Security

Penetration Testing

Security by Design

Cloud Security

Container Security

Tools

Checkmarx

Coverity

Fortify

Veracode

CodeQL

Burp Suite

OWASP ZAP

Snyk

Job description

Digital Technology Specialist - Product Security

Do you enjoy programming and leading a team which builds and supports securing products? Would you like to be part of a successful team? Join our Team.

Baker Hughes is the leading energy technology company. Our innovative technologies and services are taking energy forward, making it safer, cleaner, and more efficient for people and the planet. We are seeking a highly motivated Product Security Engineer to help secure our software products and development ecosystem. This role is responsible for identifying and mitigating security risks throughout the Software Development Lifecycle (SDLC), partnering with engineering teams to build secure‑by‑design products, and advancing security practices for AI‑assisted software development. The ideal candidate combines strong offensive security skills with practical software engineering knowledge and hands‑on experience across application security testing, secure coding, open‑source security, and container security.

Partner with the best

Application & Product Security

Perform penetration testing and application vulnerability assessments on web, API, cloud, and containerized applications. Identify, validate, prioritize, and communicate security vulnerabilities to development teams. Conduct threat modelling and security design reviews for new products and features. Drive remediation efforts and provide secure coding guidance to engineering teams.

Secure SDLC & DevSecOps

Embed security controls throughout the Software Development Lifecycle (SDLC). Partner with developers, architects, and DevOps teams to implement security by design. Integrate and optimize security tooling within CI/CD pipelines. Support security automation and policy‑as‑code initiatives.

Application Security Testing

Execute and interpret results from: Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (OSS/SCA), Container Security Scanning, Secret Detection and Code Scanning. Triage findings, reduce false positives, and drive risk‑based remediation.

AI Security & AI-SSDLC

Assess security risks introduced by AI‑assisted development and AI‑enabled applications. Support implementation of AI Secure SDLC (AI‑SSDLC) practices. Evaluate AI‑generated code for security weaknesses and unsafe design patterns. Contribute to AI threat modelling, agent security, prompt security, and secure AI development guardrails. Stay current on emerging risks related to LLMs, AI agents, model abuse, and AI supply chain security.

Developer Enablement

Deliver security coaching, training, and awareness sessions for development teams. Create actionable security guidance, standards, and best practices. Champion a security‑first culture across product engineering teams.

Required Experience

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Software Engineering, or related field.
• 5‑8 years of experience in Application Security, Product Security, Penetration Testing, or Secure Software Engineering.
• Strong understanding of modern software development practices and SDLC.
• Experience performing manual and automated penetration testing.
• Experience securing cloud‑native and containerized applications.
• Strong programming or scripting skills in one or more languages such as Python, Java, JavaScript, C#, Go, or C++.
• Deep understanding of common vulnerabilities including OWASP Top10 and API security risks.

Technical Skills

• SAST tools (Checkmarx, Coverity, Fortify, Veracode, CodeQL)
• DAST tools (Burp Suite, AppScan, Veracode, OWASP ZAP)
• OSS/SCA tools (Black Duck, Mend, Snyk, Dependency‑Check)
• Container security platforms (Prisma Cloud, Wiz, Aqua, Trivy)
• Cloud & DevSecOps (GitHub, GitLab, Azure DevOps, Jenkins, CI/CD)
• Security controls for Kubernetes and container platforms
• Infrastructure as Code security
• AI Security (AI Secure SDLC, LLM and Agent security concepts, Prompt injection and model misuse risks, Secure AI application development, AI supply chain security and model governance)

Work Patterns

Work in a way that works for you. We recognize that everyone is different and that the way in which people want to work and deliver at their best is different for everyone too. In this role, we can offer the following flexible working patterns: Working remotely from home or any other office location, provided you visit the office when needed. Working flexible hours – flexing the times when you work in the day to help you fit in everything in and work when you are the most productive. Working with us.

Benefits

• Contemporary work-life balance policies and well‑being activities
• Comprehensive private medical care options
• Safety net of life insurance and disability programs
• Tailored financial programs

About Us

With operations in over 120 countries, we provide better solutions for our customers and richer opportunities for our people. As a leading partner to the energy industry, we are committed to achieving net‑zero carbon emissions by 2050 and we are always looking for the right people to help us get there. People who are as passionate as we are about making energy safer, cleaner, and more efficient.

Join Us

Are you seeking an opportunity to make a real difference in a company with global reach and exciting services and clients? Come join us and grow with a team of people who will energize and inspire you!

Internal Title

The Baker Hughes internal title for this role is: Digital Technology Specialist - Product Security

Company Culture

Our people are at the heart of what we do at Baker Hughes. We know we are better when all our people are developed, engaged and able to bring their whole authentic selves to work. We invest in the health and well‑being of our workforce, train and reward talent and develop leaders at all levels to bring out the best in each other.

Work for you: We prioritize rewarding those who embrace change with a package that reflects how much we value their input.

We believe in creating an environment of diversity and inclusion, without bias.

We know we are better when all of our people are developed, engaged, and able to bring their whole authentic selves to work. We're makers, inventors, and leaders who aren't afraid of the tough challenges.

We believe pushing boundaries will help to lead the way for a new energy future.