Senior Engineer - Product Security

Aptiv; Bengaluru; Hybrid; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Life insurance

Disability coverage

RRSP matching

Flexible time-off

Learning benefits

Job summary

Wind River is seeking a Security Engineer to collaborate with Product Engineering, Software Development, QA and customer teams to ensure security across infrastructure and software. The role emphasizes secure-by-design hybrid infrastructure and cloud-native security controls, with hands-on work in cloud platforms and on-prem environments.

The candidate should have 3-5 years in IT security, strong cloud/IAC capabilities, and solid knowledge of DevSecOps tools and security testing techniques,

Qualifications

• 3-5 years of IT security experience
• Proficient in public cloud management leveraging IAC
• Strong understanding of DevSecOps technologies
• Hands-on application security, API security and penetration testing
• Experience with security tools such as Coverity, Burp Suite, Trivy, Prisma Cloud, Tenable, CrowdStrike

Responsibilities

• Deep understanding and hands-on experience in AWS and Azure native services
• Secure OnPrem and Public Cloud environments leveraging IAC and policy as code
• Practical hands-on application security, API security and penetration testing
• Good understanding of security tools Coverity, BurpSuite, Trivy, Prisma Cloud, Tenable, CrowdStrike
• Working experience in container and cluster hardening
• Excellent programming skills using Python
• Proficiency in pipeline automation leveraging Gitlab, Jenkins, Jira
• Strong foundation of vulnerability management, remediation, and troubleshooting skills
• Proactive and adaptable with a willingness to learn

Skills

AWS

Azure

Python

DevSecOps

Penetration Testing

Security Tools

Education

Bachelor's in Computer Science or related

Tools

Terraform

GitLab/Jenkins

Job description

ABOUT WIND RIVER

Wind River is a global leader in delivering software for mission-critical intelligent systems. For more than four decades, the company has been an innovator and pioneer, powering billions of systems that require the highest levels of security, safety, and reliability. Wind River helps customers across automotive, aerospace, defense, industrial, medical, and telecommunications industries solve complex technology challenges on their journey toward the new intelligent machine economy. The company’s software powers generation after generation of the safest, most secure systems in the world. Examples include playing a key role in NASA space missions such as Artemis I, the James Webb Space Telescope, and multiple Mars rovers. We’ve achieved recent 5G milestones including the world’s first successful 5G data session with Verizon and building one of the largest Open RAN networks in the world with Vodafone. The company has received industry recognition for its technology innovation and leadership, and for its workplace culture, including global Great Place to Work certification and being named a "Top Workplace" for ten consecutive years. If you want to be part of a unique culture where the lived experience is based on our cultural attributes of growth mindset, customer-focus, and diversity, equity, inclusion & belonging, come join us and help advance the future software defined world.

YOUR ROLE

As a Security Engineer at Wind River, you will play a pivotal role in our mission. You’ll work closely with Product Engineering, Software Development, QA, and our customer-facing teams to ensure requisite levels of infrastructure, applications, and software security. Collaboration and teamwork are key, as you'll actively participate in global projects, working with colleagues from around the world. Your responsibilities will span from providing secure by-design hybrid infrastructure and security controls implementation for cloud-native solutions. To succeed in this role, you should have 3-5 years of IT security experience, be proficient in public cloud management leveraging IAC, and possess a strong understanding of DevSecOps technologies, pioneering new security tools, processes and capabilities for cloud-native solutions. A proactive mindset, solid technical skills, and the ability to work autonomously are essential.

What You'll Do

• Deep understanding and hands-on experience in AWS and Azure native services
• Secure OnPrem and Public Cloud environments leveraging IAC and policy as code
• Practical hands-on application security, API security and Penetration testing
• Good understanding of security tools Coverity, BurpSuite, Trivy, Prisma Cloud , Tenable, CrowdStrike etc.
• Working experience in container and cluster hardening
• Excellent programming skills using Python
• Proficiency in pipeline automation leveraging Gitlab, Jenkins, Jira etc.
• Strong foundation of vulnerability management, remediation, and troubleshooting skills
• Proactive and adaptable with a willingness to learn

Required Skills

• Bachelor's in Computer Science, Electronics/Electrical Engineering, or related field.
• 3-5 years of IT security experience
• Proficient in public cloud management leveraging IAC
• Strong understanding of DevSecOps technologies
• Practical hands-on application security, API security and Penetration testing
• Good understanding of security tools Coverity, BurpSuite, Trivy, Prisma Cloud , Tenable, CrowdStrike etc.

IT’S WHAT WE OFFER YOU

• Hybrid work model for workplace flexibility
• Comprehensive health, dental, and life insurance
• Short and long-term disability coverage
• RRSP matching for financial security
• Flexible time-off policies for work-life balance
• Employee assistance program for mental well-being
• Learning benefits, including a LinkedIn Learning subscription and seminars

Wind River is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, gender identity, sexual orientation, disability status, protected veteran status or any other characteristic protected by law.