Lead Software Engineer

Careernet; Bengaluru; Hybrid; INR 3,500,000 - 6,000,000; Full time

Job summary

Careernet invites a Lead Software Engineer to drive product security and software delivery in a regulated medical product environment. The role blends security engineering, hands-on development, and DevOps, with emphasis on embedding security into the SDLC and enabling secure releases.

The incumbent will work with engineering, quality, regulatory, and cybersecurity teams to deliver compliant, secure software products. Strong Python and secure coding skills are essential.

Qualifications

• Education: bachelor’s degree in CS/ENG or equivalent.
• Experience in product security, DevOps or related engineering roles.
• Core tech: Python, secure coding, source control, CI/CD tooling.
• Preferred: regulated product development, cloud, containers, observability.

Responsibilities

• Support secure software development across product teams including threat modeling and design reviews.
• Perform or support security testing, vulnerability triage, and remediation evidence.
• Support CI/CD pipelines, build/release automation, and security checks integration.
• Prepare security and engineering documentation for compliance and traceability.
• Collaborate with software, quality, regulatory, DevOps, and cybersecurity teams.
• Mentor engineers on secure coding and DevSecOps adoption.

Skills

Python scripting

Secure coding

Vulnerability remediation

Source control

CI/CD concepts

DevOps practices

Education

Bachelor's degree in Computer Science

Tools

Git

CI/CD tooling

Cloud platforms

Container technologies

Job description

Job Function: Lead Software Engineer

Experience - 5-9 years

Job Summary:

The Lead Software Engineer is a senior individual contributor role focused on

building secure, reliable, and maintainable software products in a regulated medical

product environment. The role combines product security, hands-on software

development, and DevOps practices, with an expected focus of approximately 80%

Product Security, and 20% DevOps. The engineer will help embed security into the

software development lifecycle, contribute to product code and technical design, and

support automation, CI/CD, and release readiness activities. This role is best suited

for a strong software engineer who has practical security knowledge and can partner

with engineering, quality, regulatory, and cybersecurity teams to deliver secure and

compliant products.

Key Responsibilities:

• Product Security Engineering: Support secure software development

  practices across product teams, including security requirements analysis,

  threat modeling, secure design review, secure coding guidance, vulnerability

  assessment, and security validation. Help teams identify, prioritize, and

  remediate security risks in product software, APIs, cloud-connected

  components, databases, and supporting engineering environments.

• Security Testing and Vulnerability Management: Perform or support

  security testing activities such as static analysis, dynamic analysis, software

  composition analysis, dependency review, basic penetration testing support,

  and vulnerability triage. Work with engineering teams to define remediation

  actions, verify fixes, and maintain clear evidence for closure.

• DevOps and Automation: Support CI/CD pipelines, build and release

  automation, source control workflows, automated testing, and integration of

  security checks into engineering pipelines. Help improve deployment

  confidence, traceability, and engineering efficiency through practical

  automation and tooling. Scripting in python

• Documentation and Compliance Support: Prepare and maintain required

  engineering and security documentation such as threat models, security

  assessment summaries, test evidence, design notes, vulnerability records,

  and remediation reports. Support compliance expectations aligned with

  applicable product security, quality, and regulatory frameworks.

• Cross-Functional Collaboration: Partner with software, systems, quality,

  regulatory, DevOps, and cybersecurity stakeholders to communicate risks,

  recommend practical solutions, and drive security and engineering

  improvements through the development lifecycle.

• Continuous Improvement: Identify opportunities to improve secure

  development practices, automation, code quality, testing depth, and release

  readiness. Mentor engineers on secure coding, vulnerability remediation, and

  practical DevSecOps adoption.

Education and Experience:

• Education: Bachelors degree in Computer Science, Software Engineering,

  or a related technical field is required.

• Experience: professional experience in product security, DevOps, or related engineering roles. The ideal candidate

  should have a strong software engineering foundation with practical exposure

  to secure software development and engineering automation.

• Core Technical Skills: Hands-on experience in at least one major

  programming language such as Python scripting. Working knowledge of

  secure coding practices, vulnerability remediation, source control, CI/CD

  concepts, and common software development tools is required.

• Preferred Skills: Experience with regulated product development, medical

  device software, cloud platforms, container technologies, observability tools,

  or security testing tools is preferred but not mandatory.

Role Competencies Requirements:

• Product Security: Working knowledge of secure SDLC practices, threat

  modelling, secure design review, secure coding, vulnerability assessment,

  and remediation. Familiarity with OWASP Top 10, common vulnerability types,

  and security testing concepts is expected.

• Software Engineering: Strong ability to design, code, debug, test, and

  maintain software. Ability to understand product requirements, contribute to

  technical design, perform code reviews, and deliver reliable implementations.

• DevOps and Automation: Working knowledge of Git-based workflows,

  CI/CD pipelines, build automation, automated testing, and integration of

  quality or security checks into development pipelines.

• Systems and Platform Awareness: Basic understanding of operating

  systems, APIs, networking, databases, and cloud or connected software

  environments. Ability to troubleshoot issues across code, build pipelines, and

  supporting environments.

• Regulatory and Quality Mindset: Awareness of documentation, traceability,

  risk management, and evidence expectations in regulated or quality-driven

  product development environments. Prior experience with medical device or

  safety-critical software is a plus.

• Problem Solving: Strong analytical skills with the ability to investigate

  technical issues, assess risk, recommend practical solutions, and drive issues

  to closure.

• Collaboration and Communication: Ability to work effectively with software,

  cybersecurity, DevOps, quality, regulatory, and product teams. Able to explain

  technical risks and recommendations clearly to both technical and non-

  technical stakeholders.