Product Security and Privacy Champion

ASSA ABLOY Global Solutions; Chennai District; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

ASSA ABLOY Global Solutions in Chennai, India, seeks a Product Security and Privacy Champion to support engineering teams in delivering the SSDL program across Web, Embedded, Mobile and Desktop platforms. You will coach teams, run security reviews, trainings, threat modeling sessions and collaborate with Security Architects to ensure consistent security outcomes.

The role involves working with multiple domains, agile environments, and opportunities to influence product security practices across

Qualifications

• Experience facilitating security reviews/workshops for engineering teams.
• Experience contributing to a Secure Software Development Lifecycle (SSDL) program.
• Understanding of application security principles and threat modeling.
• Experience with security tools such as SAST, DAST, SCA and vulnerability scanners.
• Hands-on in embedded, mobile, web/API or desktop security domains.

Responsibilities

• Deliver PSP controls and threat modeling training sessions.
• Run PSP controls assessment sessions with engineering teams.
• Facilitate threat model reviews and provide practical security guidance.
• Collaborate with Security Architects to enable scalable security practices.
• Contribute to architecture reviews, risk management and tool triage.
• Support supply chain security, onboarding and external compliance activities.
• Translate HID security standards into actionable guidance for teams.

Skills

Security reviews facilitation

Secure SDLC knowledge

Threat modeling

Security tools usage

Education

Bachelor’s Degree in Computer Science or equivalent

Tools

SAST

DAST

SCA

Vulnerability scanners

Secret scanners

Job description

Product Security and Privacy Champion (Chennai, India) – Job ID: 47583

Profile Summary: As part of the Product Security and Privacy team, reporting to the Chief Product Security & Privacy Architect, you will provide hands‑on support to engineering teams. Working autonomously, you will be the go‑to person for all day‑to‑day security and privacy related activities. Your main goal is to coach and help teams succeed in adopting the SSDL program. You work closely with security architects, ensuring consistent quality of the program outputs and managing escalations. You will have opportunities to work on a very wide portfolio of applications based on different technologies (Web, Embedded, Mobile, Desktop) within a very diverse and international context covering all five HID Business Areas.

Qualifications

• Demonstrated experience facilitating security reviews/workshops or delivering training to engineering teams.
• Experience contributing to at least one Secure Software Development Lifecycle (SSDL) program, either as a security architect, security champion, or similar role.
• Working knowledge of general principles of application security.
• Working knowledge of threat modeling principles.
• Experience using security tools (SAST, DAST, SCA, Vulnerability Scanners, Secret Scanners).
• Hands‑on experience in at least one, preferably more, of these application domains:
  • Embedded device security
  • Mobile security
  • Web & API security
  • Desktop security

Roles & Responsibilities (Other duties may be assigned)

• Deliver Product Security & Privacy (PSP) controls and Threat Modeling face‑to‑face and virtual training sessions.
• Run PSP controls assessment working sessions.
• Facilitate threat model review sessions.
• Hands‑on support in partnership with Security Architects and engineering teams focusing on enablement, facilitation, and scalable reuse in:
  • Training content creation
  • Architecture Reviews/Audits
  • Risk Management/Incident Handling/Tool Triage
  • Implementation of Reusable Patterns
  • Supply Chain Issues
  • Acquisition Onboarding / Training Delivery
  • External compliance activities, such as Cyber Resilience Act (CRA)
  • Interpretation and training on HID internal security/privacy standards and PSP controls.
  • Provide feedback and insights from engineering reality to the PSP team: what works, what doesn’t, friction points, and opportunities to improve processes, tooling, and platforms.

Preferred Qualifications

• Cloud infrastructure, Supply Chain, and Operational Security
• Experience with Agile/SAFe Methodology
• Experience with usage of AI tools in the context of a security program
• At least one security or privacy certification (CISSP, CIPT, CSSLP, CEH, …) is a plus

Education and/or Experience

• Bachelor’s Degree or equivalent experience in computer science
• 4+ years of total experience in software engineering and a strong affinity for product/application security

Soft Skills

• Ability to effectively communicate complex concepts clearly and effectively in the English language, both verbally and in writing
• Like training and knowledge‑sharing, with a strong motivation to ensure the security program is successfully implemented by the teams
• Highly adaptable and approachable, fostering collaboration and open communication
• Ability to tailor your communication to different audiences such as product owners, development teams, architects, and other high‑level users
• Strong technical acumen with the ability to engage effectively with development teams
• Continuous learning mindset

This opportunity may be open to flexible working arrangements.

HID is an Equal Opportunity/Affirmative Action Employer – Minority/Female/Disability/Veteran/Gender Identity/Sexual Orientation.