Product Security Engineer

Jobgether; India; Remote; INR 900,000 - 1,300,000; Full time

Benefits offered by this job

Remote work from home

Meaningful impact on product security

Professional growth opportunities

Ownership and autonomy

Collaborative culture

Inclusive workplace

Background check may apply

Job summary

Jobgether is seeking a Product Security Engineer in India to join a remote-first security team. You will partner with engineering, product, and DevOps to embed security into the software lifecycle, design secure-by-default solutions, and automate security processes.

You will lead security projects, perform threat modeling, code reviews, and integrate SAST/DAST/SCA tools, while promoting secure development practices across teams in a fast-paced, remote environment.

Qualifications

• 3+ years in product security or secure software development.
• Experience with threat modeling and secure code reviews.
• Hands-on with automated security testing and common vulnerabilities (OWASP Top 10).
• Familiarity with SAST/DAST/SCA and integrating them into dev workflows.
• Proven ability to lead initiatives and influence cross-functional teams.
• Bachelor's degree in Engineering, CS or related discipline, or equivalent experience.
• Cloud security experience (Terraform, AWS, GCP, Kubernetes, Docker) preferred.
• Bug bounty familiarity or offensive security practices preferred.
• Experience building reusable security libraries or secure-by-default workflows preferred.
• Adaptive, proactive communicator in a fast-paced, remote environment.
• Prior experience in cybersecurity, tech, or SaaS is a plus.

Responsibilities

• Collaborate with Engineering and Product to review architecture and identify security risks.
• Build secure-by-default libraries and standardized practices to prevent vulnerabilities at scale.
• Strengthen application security with SAST/DAST/SCA and secrets scanning.
• Lead cross-functional security initiatives from scoping to implementation.
• Automate security workflows to expand coverage and reduce repetitive tasks.
• Apply feedback to refine security practices and tools.
• Contribute to vulnerability research and bug bounty activities.
• Promote secure development practices across engineering teams.

Skills

Programming (Python/Go/Java/Ruby)

Threat modeling

Secure development practices

Communication & collaboration

Education

Bachelor's degree in Engineering/CS or related

Tools

SAST

DAST

SCA

Secrets scanning

Job description

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Product Security Engineer based in India.

Join a remote-first security team dedicated to helping organizations identify and address vulnerabilities before they become serious threats. As a Product Security Engineer, you will work closely with engineering, product, and DevOps teams to embed security into the entire software development lifecycle. You will help design secure-by-default solutions, strengthen application security practices, and build automation that prevents entire classes of vulnerabilities. Through threat modeling, code reviews, and security tooling, you will improve protection while enabling teams to innovate and deliver quickly. This role offers the opportunity to take ownership of impactful security projects, influence technical roadmaps, and turn security insights into measurable improvements. You will thrive in a collaborative, fast-paced environment that values initiative, continuous learning, and diverse perspectives.

Accountabilities

• Collaborate with Engineering and Product: Partner with engineering teams to review architecture, assess new features, identify security risks, and prioritize improvements without unnecessarily slowing development.
• Build Secure-by-Default Solutions: Develop and improve secure libraries, reusable components, and standardized development practices that prevent recurring vulnerabilities at scale.
• Strengthen Application Security: Configure, optimize, and maintain security tools, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and secrets scanning, to improve detection and reduce false positives.
• Lead Security Projects: Manage cross-functional initiatives from initial scoping through implementation, influencing engineering and product roadmaps while communicating technical risks and recommendations to diverse stakeholders.
• Automate Security Operations: Develop scripts, tools, and automated workflows that expand security coverage, reduce repetitive tasks, and improve the efficiency of security processes.
• Support Continuous Improvement: Apply feedback and lessons learned to refine security practices, evaluate emerging tools, and promote measurable security outcomes.
• Champion Security Research: Participate in the organization's vulnerability discovery and bug bounty ecosystem, testing new approaches and sharing insights that can improve platform security and product capabilities.
• Promote Security Awareness: Help engineering teams adopt secure development practices and integrate security considerations into everyday technical decisions.

Requirements

• Professional Experience: At least 3 years of experience in product security, application security, or secure software development, with practical experience securing modern applications.
• Programming and Automation: Proficiency in at least one modern programming language, such as Python, Go, Ruby, or Java, with the ability to review code, automate tasks, and build security tools.
• Application Security Expertise: Hands-on experience with threat modeling, secure code reviews, and automated security testing, along with a strong understanding of common vulnerabilities, including the OWASP Top 10.
• Security Tooling: Familiarity with SAST, DAST, SCA, and secrets-scanning solutions, including the ability to improve their effectiveness and integrate them into development workflows.
• Project and Stakeholder Management: Demonstrated ability to lead initiatives, communicate security risks clearly, and influence cross-functional teams across Engineering, DevOps, and Product.
• Education: A bachelor's degree in Engineering, Computer Science, or a related discipline, or equivalent practical experience.
• Cloud Security (Preferred): Experience securing cloud-native environments and Infrastructure as Code, including technologies such as Terraform, AWS, GCP, Kubernetes, or Docker.
• Bug Bounty Experience (Preferred): Familiarity with bug bounty programs, vulnerability disclosure processes, or offensive security practices.
• Secure Development Enablement (Preferred): Experience building reusable security libraries, standardized workflows, or secure-by-default development solutions that eliminate entire categories of vulnerabilities.
• Adaptability and Communication: A proactive, analytical mindset, strong problem-solving abilities, and the capacity to work effectively in a fast-paced, collaborative, remote environment.
• Industry Experience (Preferred): Previous experience in a growing cybersecurity, technology, or SaaS organization is an advantage.

Benefits

• Remote Work: Work from home full-time while collaborating with a distributed team.
• Meaningful Impact: Contribute to improving software security and helping organizations prevent real-world cyber threats.
• Professional Growth: Gain opportunities to expand your application security expertise, experiment with new tools, and influence security engineering practices.
• Ownership and Autonomy: Lead projects from concept to implementation and contribute directly to technical and strategic decisions.
• Collaborative Culture: Work alongside colleagues with diverse backgrounds and perspectives in an environment that values teamwork, inclusion, and shared learning.
• Inclusive Workplace: Equal employment opportunities and reasonable accommodations throughout the recruitment process.
• Compensation: Salary details were not specified in the original job description and may be discussed during the recruitment process.
• Additional Conditions: Employment may be subject to background checks due to access to confidential and proprietary information.

We appreciate your interest and wish you the best!