Digital Technology Specialist - Product Security

Baker Hughes; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Baker Hughes in Bengaluru is seeking a Product Security Engineer to secure software products and development ecosystem. You will perform penetration testing and assess vulnerabilities across web, API, cloud, and containerized apps.

The role emphasizes secure-by-design practices, threat modelling, and collaboration with engineering teams to drive remediation and secure coding guidance throughout the SDLC.

Qualifications

• Hands-on experience in application security testing.
• Solid secure coding practices and software engineering knowledge.
• Experience in open-source security and container security.

Responsibilities

• Perform penetration testing and application vulnerability assessments on web, API, cloud, and containerized applications.
• Identify, validate, prioritize, and communicate security vulnerabilities to development teams.
• Conduct threat modelling and security design reviews for new products and features.
• Drive remediation efforts and provide secure coding guidance to engineering teams.
• Embed security controls throughout the Software Development Lifecycle (SDLC).
• Partner with developers, architects, and DevOps teams to implement security by design.
• Integrate and optimize security tooling within CI/CD pipelines.
• Support security automation and policy-as-code initiatives.
• Execute and interpret results from Static and Dynamic Application Security Testing (SAST/DAST).

Skills

Offensive security

Secure coding

Open-source security

Container security

Appsec testing

Threat modelling

Tools

SAST tools

DAST tools

CI/CD security tooling

Job description

Do you enjoy programming and leading a team which builds and supports securing products?

Would you like to be part of a successful team?

Join our Team.

Baker Hughes is the leading energy technology company. Our innovative technologies and services are taking energy forward, making it safer, cleaner, and more efficient for people and the planet.

We are seeking a highly motivated Product Security Engineer to help secure our software products and development ecosystem. This role is responsible for identifying and mitigating security risks throughout the Software Development Lifecycle (SDLC), partnering with engineering teams to build secure‑by‑design products, and advancing security practices for AI‑assisted software development.

The ideal candidate combines strong offensive security skills with practical software engineering knowledge and hands‑on experience across application security testing, secure coding, open‑source security, and container security.

Partner with the best

As a Digital Technology Specialist - Product Security, you will be responsible for:

Application & Product Security

• Perform penetration testing and application vulnerability assessments on web, API, cloud, and containerized applications.
• Identify, validate, prioritize, and communicate security vulnerabilities to development teams.
• Conduct threat modelling and security design reviews for new products and features.
• Drive remediation efforts and provide secure coding guidance to engineering teams.

Secure SDLC & DevSecOps

• Embed security controls throughout the Software Development Lifecycle (SDLC).
• Partner with developers, architects, and DevOps teams to implement security by design.
• Integrate and optimize security tooling within CI/CD pipelines.
• Support security automation and policy‑as‑code initiatives.

Application Security Testing

• Execute and interpret results from:
  • Static Application Security Testing (SAST)
  • Dynamic Application Security