Lead Secure Software Engineer

Persistent-Systems; Pune District; Hybrid; INR 2,500,000 - 4,200,000; Full time

Benefits offered by this job

Group term life insurance

Personal accident coverage

Mediclaim hospitalization

Flexible work hours

Long service awards

Company-sponsored higher education and

Job summary

Persistent Systems Limited is seeking an experienced Lead Secure Software Engineer in Pune to design and implement secure software across enterprise environments. You will drive secure coding practices, mentor teams, and partner with security and development teams to embed security in the SDLC.

The role emphasizes hands-on secure software design, vulnerability remediation, and threat modeling with cross-team collaboration to deliver secure, scalable applications.

Qualifications

• 12-15 years of experience in Software Development, Secure Software Engineering, Application Security, or Product Security.
• Deep understanding of secure coding principles and common software security vulnerabilities.
• Strong knowledge of OWASP Top 10, CWE/SANS Top 25, secure design principles and modern app security practices.
• Experience performing manual code reviews and interpreting findings from SAST, DAST and SCA tools.
• Expertise in authentication, authorization, identity management, session management, encryption, and cryptographic implementations.

Responsibilities

• Design and develop secure application features, reusable libraries, frameworks, and security controls for enterprise applications.
• Perform security-focused code reviews and identify vulnerabilities across application codebases.
• Analyze and remediate security findings from SAST, SCA, penetration testing, and manual code reviews.
• Collaborate with application security teams to implement secure-by-design development practices.
• Integrate secure coding checks, automated security testing, and quality gates into CI/CD pipelines.
• Mentor development teams on secure coding best practices and OWASP principles.

Skills

Secure software engineering

Application security

OWASP principles

Mentoring teams

Education

Bachelor's degree in Computer Science / IT / Cyber Security

CSSLP / CISSP / GWAPT / GWEB certifications desirable

Tools

Checkmarx

Veracode

Fortify

SonarQube

Snyk

Coverity

Job description

About Position:

We are seeking an experienced Lead Secure Software Engineer to develop secure software solutions and drive secure coding practices across enterprise application environments. This role focuses on designing resilient software components, identifying and remediating code-level security vulnerabilities, and partnering with development and application security teams to embed security throughout the software development lifecycle. The ideal candidate will possess deep software engineering expertise combined with strong application security knowledge to help build secure, scalable, and maintainable applications.

• Role: Lead Secure Software Engineer
• Location: Pune
• Experience: 12 to 15 Years
• Job Type: Full-Time Employment

What You'll Do:

• Design and develop secure application features, reusable libraries, frameworks, and security controls for enterprise applications.
• Perform security-focused code reviews and identify vulnerabilities across application codebases.
• Analyze and remediate security findings from Static Application Security Testing (SAST), Software Composition Analysis (SCA), penetration testing, and manual code reviews.
• Collaborate with application security teams to implement secure-by-design development practices.
• Integrate secure coding checks, automated security testing, and quality gates into CI/CD pipelines.
• Develop secure authentication, authorization, session management, and data protection mechanisms.
• Review APIs, microservices, and cloud-native application components for security weaknesses and design flaws.
• Participate in threat modeling exercises and implement remediation strategies for identified risks.
• Create secure coding standards, development guidelines, reference implementations, and developer training materials.
• Mentor development teams on secure coding best practices, OWASP principles, and vulnerability remediation techniques.
• Work closely with architects, developers, DevOps teams, and security stakeholders to ensure security requirements are embedded into software solutions.
• Troubleshoot complex security issues and support incident investigations related to application vulnerabilities.
• Contribute to continuous improvement of secure development frameworks, tools, and engineering practices.

Expertise You'll Bring:

• 12-15 years of experience in Software Development, Secure Software Engineering, Application Security, or Product Security.
• Deep understanding of secure coding principles and common software security vulnerabilities.
• Strong knowledge of OWASP Top 10, CWE/SANS Top 25, secure design principles, and modern application security practices.
• Experience performing manual code reviews and interpreting findings from SAST, DAST, and Software Composition Analysis tools.
• Expertise in authentication, authorization, identity management, session management, encryption, and cryptographic implementations.
• Experience securing REST APIs, GraphQL services, microservices, and cloud-native applications.
• Hands-on experience with application security tools such as Checkmarx, Veracode, Fortify, SonarQube, Snyk, Coverity, Black Duck, or equivalent platforms.
• Familiarity with CI/CD platforms such as Azure DevOps, GitHub Actions, GitLab CI/CD, Jenkins, or Harness.
• Understanding of secure software architecture, cloud security, container security, and DevSecOps practices.
• Experience conducting threat modeling and translating security requirements into practical engineering solutions.
• Strong debugging, root cause analysis, and problem-solving capabilities.
• Ability to communicate complex security concepts effectively to engineering and business stakeholders.
• Proven experience mentoring development teams and driving secure development practices at scale.
• Bachelor's degree in Computer Science, Information Technology, Cyber Security, Engineering, or a related discipline.
• Certifications such as CSSLP, CISSP, GWAPT, GWEB, Secure Software Practitioner, or equivalent security certifications are highly desirable.
• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."