Senior Application Security / Product Security Engineer Cybersecurity & Networking Practice Mum[...]

Galaxy Office Automation Pvt. Ltd.; Mumbai; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Galaxy Office Automation Pvt. Ltd. in Mumbai seeks an experienced Senior Application Security / Product Security Engineer to fortify our software across the SDLC. You will lead security reviews, perform testing across web/API/mobile/thick clients, and collaborate with engineering and DevOps to remediate risks.

The role requires hands-on security design reviews, threat modeling, and strong knowledge of cloud security (AWS/Azure/GCP). Certifications like CEH/CISSP are preferred.

Qualifications

• Strong understanding of Application Security and Product Security principles.
• Experience with secure SDLC practices.
• Knowledge of cloud platforms (AWS / Azure / GCP) and cloud security architecture.
• Experience performing security design reviews and threat modeling.
• Familiarity with OWASP Top 10, API Security Top 10, and common vulnerability classes.
• Experience using security tools such as: SAST, DAST, SCA, API testing tools

Responsibilities

• Integrate security practices into the Software Development Lifecycle (SDLC).
• Perform application security design reviews for new and existing products.
• Conduct manual and automated security testing of web, API, mobile, and thick client applications.
• Identify vulnerabilities such as OWASP Top 10, authentication issues, authorization flaws, and API security risks.
• Review cloud architecture and deployments (AWS, Azure, GCP) for security best practices.
• Work with development teams to prioritize and remediate vulnerabilities.
• Perform threat modeling and security architecture assessments.
• Track vulnerabilities, remediation status, and risk metrics using Excel or vulnerability management tools.

Skills

Application Security

Product Security

Secure SDLC

Threat Modeling

Cloud Security

OWASP Top 10

Security Testing

DevSecOps

CI/CD Security

Security Tools

Job description

Home Careers Senior Application Security / Product Security Engineer

Senior Application Security / Product Security Engineer

Cybersecurity & Networking Practice Mumbai Full Time 7+ years

We are seeking an experienced Application Security / Product Security Engineer to help secureour applications and products throughout the software development lifecycle. The idealcandidate will have strong knowledge of cloud-based architectures, application security bestpractices, and secure SDLC, along with hands-on experience performing security designreviews and application testing across web, API, mobile, and thick client applications. This rolerequires close collaboration with engineering, architecture, DevOps, and product teams toidentify security risks early and ensure secure product development.

Key Responsibilities

• Integrate security practices into the Software Development Lifecycle (SDLC).
• Perform application security design reviews for new and existing products.
• Conduct manual and automated security testing of:
• Identify vulnerabilities such as OWASP Top 10, authentication issues, authorization flaws, and API security risks.
• Review cloud architecture and deployments (AWS, Azure, GCP) for security best practices.
• Work with development teams to prioritize and remediate vulnerabilities.
• Perform threat modeling and security architecture assessments.
• Track vulnerabilities, remediation status, and risk metrics using Excel or vulnerability management tools.

Required Skills & Qualifications

• Strong understanding of Application Security and Product Security principles.
• Experience with secure SDLC practices.
• Knowledge of cloud platforms (AWS / Azure / GCP) and cloud security architecture.
• Experience performing security design reviews and threat modeling.
• Familiarity with OWASP Top 10, API Security Top 10, and common vulnerability classes.
• Experience using security tools such as: SAST, DAST, SCA, API testing tools

Preferred Background

• Certifications such as: CEH, OSCP, GWAPT, CSSLP, CISSP
• Experience with DevSecOps pipelines and CI/CD security integration and architecture design principles.
• Experience with container and Kubernetes security and cloud security. Soft Skills
• Strong communication and collaboration skills
• Ability to manage multiple projects and stakeholders
• Analytical thinking and problem-solving ability

Galaxy Office Automation is an equal-opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration without regard to race, religion, gender, age, or disability status.