Principal Software Engineer / Engineering Manager – Security

ULTISOURCE; Bengaluru; Hybrid; INR 3,800,000 - 6,800,000; Full time

Job summary

ULTISOURCE is seeking a Principal Software Engineer / Engineering Manager – Security to shape product security across SaaS and on-prem platforms. This role blends hands-on security leadership with strategic design across cloud-native and container environments, including governance of secrets, encryption, and secure SDLC practices.

The position can be structured as Principal Engineer or Engineering Manager leading a small security team, reporting into senior technology leadership in Bengaluru.

Qualifications

• Strong experience in software, application, or product security.
• Experience securing SaaS and on-premises/customer-managed software products.
• Hands-on expertise in cloud-native, Kubernetes, and container security.
• Experience implementing major compliance frameworks such as SOC 2, ISO 27001, FIPS, FedRAMP, or NIST 800.

Responsibilities

• Define security architecture for new products, services, and features.
• Lead secure design across SaaS, on-premises, cloud, Kubernetes, and container environments.
• Design trusted computing and workload isolation, and manage secrets and encryption processes.
• Establish secure SDLC practices, code scanning, CI/CD security controls, and software supply-chain security.
• Conduct architecture reviews, threat modelling, vulnerability management, and penetration testing.
• Support compliance programs such as SOC 2 Type 2, ISO 27001, FIPS, NIST 800, FedRAMP.
• Partner with auditors, engineering, product, GRC, and customer-facing teams.
• Prepare security whitepapers, design docs, and customer-facing security responses.
• Contribute to security incident readiness, response processes, and program metrics.

Skills

Security architecture

Threat modelling

Kubernetes

Tools

Kubernetes

Job description

Principal Software Engineer / Engineering Manager – Security

Client Type: Product-Based Technology Company

Job Type: Full Time With Client

Work Mode: Hybrid / Remote

Experience: 12 – 18 Years

Skills: Security architecture, T hreat modeling, Kubernetes.

We are looking for a hands-on security leader to shape product security across SaaS and customer-managed/on-premises platforms. Depending on experience, this position can be structured as a Principal Engineer role or an Engineering Manager role leading a small security team.

Key Responsibilities

• Define security architecture for new products, services, and features
• Lead secure design across SaaS, on-premises, cloud, Kubernetes, and container environments
• Design trusted and confidential computing capabilities, secure boot, hardware attestation, and workload isolation
• Own secrets, keys, credentials, encryption, rotation, and vault integrations
• Establish and manage secure SDLC practices, including code scanning, CI/CD security controls, artifact signing, and software supply-chain security
• Conduct architecture reviews, threat modelling, vulnerability management, and penetration testing
• Support compliance programs such as SOC 2 Type 2, ISO 27001, FIPS 140, NIST 800, and FedRAMP
• Partner with auditors, engineering, product, GRC, and customer-facing teams
• Prepare security whitepapers, design documents, and customer-facing security responses
• Contribute to security incident readiness, response processes, and program metrics

What We’re Looking For

• Strong experience in software, application, or product security
• Experience securing SaaS and on-premises/customer-managed software products
• Hands-on expertise in several areas, including:
• Cloud-native, Kubernetes, and container security
• Network security and tenant isolation
• Cryptography and secrets management
• Trusted or confidential computing
• Secure SDLC and software supply-chain security
• Experience implementing at least one major compliance framework such as SOC 2, ISO 27001, FIPS, FedRAMP, or NIST 800
• Experience managing vulnerability assessment and penetration-testing programs
• Strong technical leadership and written communication skills
• Ability to balance strong security controls with product delivery priorities

Good to Have

• Direct FedRAMP authorization experience
• Experience with GPU, HPC, or AI/ML infrastructure security
• Knowledge of TPMs, hardware attestation, SEV-SNP, TDX, or confidential computing
• Experience supporting enterprise customer security reviews and sales discussions