Product Security and Privacy Champion

HID; Chennai District; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

HID Global is seeking a Product Security and Privacy Champion to help coach engineering teams in adopting the SSDL program and maintain high quality security outputs across Web, Embedded, Mobile, and Desktop applications. The role reports to the Chief Product Security & Privacy Architect and involves hands-on support in a dynamic, international environment in Chennai.

You will collaborate with security architects to drive PSP controls, threat modeling sessions, and scalable security enablement,

Qualifications

• Demonstrated experience facilitating security reviews/workshops or delivering training to engineering teams.
• Experience contributing to at least one Secure Software Development Lifecycle (SSDL) program, either as a security architect, security champion, or similar role.
• Working knowledge of general principles of application security.
• Working knowledge of threat modeling principles.
• Experience using security tools (SAST, DAST, SCA, Vulnerability Scanners, Secret Scanners).
• Hands-on experience in Embedded device Security, Mobile security, Web & API security, or Desktop security.

Responsibilities

• Deliver Product Security & Privacy controls and Threat Modeling training sessions.
• Run PSP controls assessment working sessions.
• Facilitate threat model review sessions.
• Provide enablement, collaboration with Security Architects and engineering teams on training content creation, architecture reviews, risk management, and tooling.
• Provide feedback from engineering reality to the PSP team on friction points and opportunities to improve processes, tooling, and platforms.

Tools

SAST

DAST

SCA

Vulnerability Scanners

Secret Scanners

Embedded Security

Mobile Security

Web & API Security

Desktop Security

Job description

An Amazing Career Opportunity for Product Security and Privacy Champion

Location: Chennai, India (Hybrid)

Job ID: 47583

Profile Summary

As part of the Product Security and Privacy team, reporting to the Chief Product Security & Privacy Architect, you will provide hands‑on support toengineering teams.

Working autonomously, you will be the go‑to person for all day‑to‑day security and privacy related activities. Your main goal is to coach and help teams succeed in adopting the SSDL program.

You work closely with security architects, ensuring consistent quality of the program outputs and managing escalations.

You will have opportunities to work on a very wide portfolio of applications based on different technologies (Web, Embedded, Mobile, Desktop) within a very diverse and international context covering all five HID Business Areas.

About HID Global

HID Global powers the trusted identities of the worlds people, places and things. We make it possible for people to transact safely, work productively and travel freely. Our trusted identity solutions give people secure and convenient access to physical and digital places and connect things that can be accurately identified, verified and tracked digitally. Millions of people around the world use HID products and services to navigate their everyday lives, and over 2 billion things are connected through HID. We work with governments, educational institutions, hospitals, financial institutions, industrial businesses, and some of the most innovative companies on the planet. Headquartered in Austin, Texas, HID Global has over 4500 employees worldwide and operates international offices that support more than 100 countries. HID Global is an ASSA ABLOY Group brand. HID Global has is the trusted source for secure identity solutions for millions of customers and users around the world. In India, we have two Engineering Centre (Bangalore and Chennai). Global Engineering Team is based in Chennai and one of the Business Unit Engineering team is based in Bangalore. Check us out: www.hidglobal.com and https://youtu.be/23km5H4K9Eo

LinkedIn: www.linkedin.com/company/hidglobal/mycompany/

Are You Ready to Join the Team

Our company is committed to finding the best and the brightest talent to help us reach the top. If you are a dynamic, highly skilled, experienced Cloud engineer and technology enthusiast, and you enjoy working in a rapid pace within a rapidly growing business environment, then you will want to consider this position. If you excel at communication, collaboration, and unrelenting innovation, we want to talk to you. And if you bring dedication, positive energy and integrity to the table, you just might be the right fit for our team.

Qualifications

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

• Demonstrated experience facilitating security reviews/workshops or delivering training to engineering teams.
• Experience contributing to at least one Secure Software Development Lifecycle (SSDL) program, either as a security architect, security champion, or similar role.
• Working knowledge of general principles of application security.
• Working knowledge of threat modeling principles.
• Experience using security tools (SAST, DAST, SCA, Vulnerability Scanners, Secret Scanners).
• Hands‑on experience in at least one, preferably more, of these application domains: Embedded device Security Mobile security Web & API security Desktop security

Roles & Responsibilities (Other Duties May Be Assigned)

• Deliver Product Security & Privacy (PSP) controls and Threat Modeling face‑to‑face and virtual training sessions.
• Run PSP controls assessment working sessions.
• Facilitate threat model review sessions.
• Hands‑on support in partnership with Security Architects and engineering teams focusing on enablement, facilitation, and scalable reuse in: Training content creation Architecture Reviews/Audits Risk Management/Incident Handling/Tool Triage Implementation of Reusable Patterns Supply Chain Issues Acquisition Onboarding / Training Delivery External compliance activities, such as Cyber Resilience Act (CRA) Interpretation and training on HID internal security/privacy standards and PSP controls.
• Provide feedback and insights from engineering reality to the PSP team: what works, what doesnt, friction points, and opportunities to improve processes, tooling, and platforms.

Preferred Qualifications.

• Cloud infrastructure, Supply Chain, and Operational Security
• Experience with Agile/SAFe Methodology.
• Experience with usage of AI tools in the context of a security program.
• At least one security or privacy certification (CISSP, CIPT, CSSLP, CEH, .) is a plus.

Education And/or Experience .