Digital Technology Specialist - Product Security

Jobgether; Indien; Remote; INR 1.800.000 - 2.400.000; Vollzeit

Benefits dieser Stelle

Remote work options

Flexible hours

Healthcare

Life and disability protection

Financial benefits

Well‑being support

Professional development

Zusammenfassung

Jobgether in India seeks a Digital Technology Specialist – Product Security to protect software products, apps, and development environments. You will lead offensive security, embed secure practices in design, code, and deployment, and address AI security challenges across the SDLC.

You will collaborate with developers, architects, and DevOps to implement robust vulnerability management, security testing, and threat modeling, advancing modern product security capabilities globally.

Qualifikationen

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Software Engineering, or related field.
• 5–8 years of professional experience in Application Security, Product Security, Penetration Testing, Secure Software Engineering, or related field.
• Strong understanding of modern software development practices and secure‑by‑design principles.
• Experience with manual and automated penetration testing and vulnerability assessments.
• Knowledge of OWASP Top 10, API security, and secure coding practices.
• Strong programming or scripting skills in Python, Java, JavaScript, C#, Go, or C++.
• Experience with SAST/DAST tools and cloud/container security.
• Familiarity with CI/CD security integration (GitHub/GitLab/Azure DevOps/Jenkins).
• Excellent communication and collaboration skills.

Aufgaben

• Perform penetration testing and vulnerability assessments across web apps, APIs, cloud, and containers.
• Conduct threat modeling and secure design reviews for new products and features.
• Integrate security controls throughout the SDLC and promote secure‑by‑design practices.
• Automate security via CI/CD pipelines and policy‑as‑code.
• Execute and interpret SAST/DAST/IAST, SCA, container security scans, and code scanning.
• Triage findings, reduce false positives, and coordinate remediation with engineering teams.
• Assess cloud‑native and containerized apps, Kubernetes setups, and infrastructure‑as‑code security.
• Evaluate AI security risks in AI‑assisted development and AI‑enabled apps.

Kenntnisse

Penetration testing

Threat modeling

Secure SDLC

DevSecOps

Programming skills

Communication

Ausbildung

Bachelor's or Master's degree in Computer Science, Cybersecurity, Software Engineering

Tools

Checkmarx

Coverity

Fortify

Veracode

CodeQL

Burp Suite

OWASP ZAP

AppScan

Black Duck

Snyk

Dependency-Check

Prisma Cloud

Wiz

Aqua

Trivy

GitHub

GitLab

Azure DevOps

Jenkins

Jobbeschreibung

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Digital Technology Specialist – Product Security based in India.

The Digital Technology Specialist – Product Security will play a critical role in protecting software products, applications, and development environments against evolving cybersecurity threats. You will combine hands‑on offensive security expertise with software engineering knowledge to identify vulnerabilities and strengthen security throughout the Software Development Lifecycle (SDLC). Working closely with developers, architects, and DevOps teams, you will embed security practices into product design, coding, testing, and deployment. The role also focuses on emerging AI security challenges, including risks associated with AI‑generated code, large language models, and AI‑enabled applications. You will help automate security controls, improve vulnerability management, and promote secure‑by‑design engineering practices. This is an opportunity to contribute to innovative technology initiatives within a global energy‑focused environment while advancing modern product security capabilities.

Accountabilities

• Application and product security: Perform penetration testing and vulnerability assessments across web applications, APIs, cloud environments, and containerized applications. Identify, validate, prioritize, and communicate security findings, working with development teams to drive effective remediation.

• Threat modeling and secure design: Conduct threat modeling and security design reviews for new products, features, and applications, providing practical recommendations to reduce security risks from the outset.

• Secure SDLC and DevSecOps: Integrate security controls throughout the Software Development Lifecycle and collaborate with developers, architects, and DevOps teams to implement security‑by‑design principles.

• Security automation: Integrate and optimize security tools within CI/CD pipelines, support security automation initiatives, and contribute to policy-as-code practices.

• Application security testing: Execute and interpret results from Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), container security scanning, secret detection, and code scanning tools.

• Vulnerability management: Triage security findings, reduce false positives, assess risk based on business and technical impact, and coordinate remediation with engineering teams.

• Cloud and container security: Assess and strengthen the security of cloud‑native applications, containerized workloads, Kubernetes environments, and infrastructure‑as‑code configurations.

• AI security and AI-SSDLC: Evaluate security risks associated with AI‑assisted software development and AI‑enabled applications, contributing to the implementation of an AI Secure Software Development Lifecycle.

• AI threat assessment: Review AI‑generated code for vulnerabilities and unsafe design patterns, contribute to AI threat modeling, and assess risks involving AI agents, prompt injection, model misuse, and AI supply chain security.

• Developer enablement: Deliver security coaching, awareness sessions, and technical guidance to engineering teams, helping developers understand vulnerabilities and apply secure coding practices.

• Security standards and best practices: Develop actionable security guidelines, technical standards, and recommendations that promote a consistent security‑first culture across product engineering teams.

• Continuous improvement: Monitor emerging cybersecurity threats, security technologies, and AI‑related risks to strengthen product security practices and improve the effectiveness of security controls.

Requirements

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Software Engineering, or a related technical discipline.

• 5–8 years of professional experience in Application Security, Product Security, Penetration Testing, Secure Software Engineering, or a closely related field.

• Strong understanding of modern software development practices, the Software Development Lifecycle, and secure‑by‑design engineering principles.

• Practical experience conducting manual and automated penetration testing and application vulnerability assessments.

• In-depth knowledge of common application security vulnerabilities, including the OWASP Top 10, API security risks, and secure coding practices.

• Strong programming or scripting skills in one or more languages, such as Python, Java, JavaScript, C#, Go, or C++.

• Hands‑on experience with application security testing tools, including SAST platforms such as Checkmarx, Coverity, Fortify, Veracode, or CodeQL, and DAST tools such as Burp Suite, AppScan, Veracode, or OWASP ZAP.

• Experience with open‑source security and software composition analysis tools, such as Black Duck, Mend, Snyk, or Dependency‑Check.

• Familiarity with container security platforms, such as Prisma Cloud, Wiz, Aqua, or Trivy, and experience securing cloud‑native and containerized applications.

• Knowledge of development and deployment platforms, including GitHub, GitLab, Azure DevOps, and Jenkins, with experience integrating security controls into CI/CD pipelines.

• Understanding of Kubernetes, container platforms, and infrastructure‑as‑code security.

• Familiarity with AI security concepts, including AI Secure SDLC, large language model and AI agent security, prompt injection, model misuse, secure AI application development, and AI supply chain security.

• Strong analytical and problem‑solving skills, with the ability to assess complex technical risks and translate findings into actionable remediation recommendations.

• Effective communication and collaboration skills, particularly when working with software engineers, architects, DevOps teams, and other technical stakeholders.

• A proactive, detail‑oriented approach to vulnerability management, continuous improvement, and developer education.

Benefits

• Flexible working arrangements: Options to work remotely or from another office location, with office visits when required.

• Flexible hours: Ability to adjust working hours to support productivity and work‑life balance.

• Healthcare: Comprehensive private medical care options.

• Life and disability protection: Access to life insurance and disability programs.

• Financial benefits: Tailored financial programs designed to support employees' needs.

• Additional benefits: A range of elected or voluntary benefits.

• Well‑being support: Work‑life balance policies and activities designed to support physical and mental well‑being.

• Professional development: Opportunities for training, skill development, and career growth in product security, cloud security, DevSecOps, and emerging AI security practices.

• Global collaboration: Exposure to international teams, advanced technologies, and security challenges within the energy technology sector.

• Purpose‑driven work: The opportunity to help develop safer, more secure, and more efficient technologies that support the future of energy.