Senior Lead Product Security Engineer

HID; Chennai; Ibrido; INR 2.500.000 - 4.000.000; Tempo pieno

Vantaggi offerti da questo lavoro

Flexible work arrangements

Descrizione del lavoro

HID Global in Chennai (Hybrid) is seeking a Senior Lead Product Security Engineer to steer the day-to-day product vulnerability management program across a diverse portfolio. You will collaborate with Information Security, Development, Legal, and Compliance to triage, prioritize, remediate, disclose, and report vulnerabilities in an auditable fashion.

The role emphasizes scalable processes, SBOM considerations, and coordinated vulnerability disclosure within a global organization, with exposure

Competenze

• Experience leading a product-security program across multiple products.
• Strong understanding of vulnerability lifecycle and disclosure practices.
• Ability to coordinate with security, development, legal, privacy, and compliance teams.

Mansioni

• Run vulnerability intake, triage, prioritization, remediation tracking, and closure across product areas.
• Lead emergency response for critical vulnerabilities and coordinate mitigation actions.
• Produce reports on risk posture, remediation performance, and disclosure activity.

Conoscenze

Vulnerability management

Product security

Leadership

Cross-functional collaboration

SBOM awareness

Strumenti

SAST

SCA

PSIRT

CI/CD

Descrizione del lavoro

Job Description:

An Amazing Career Opportunity for Senior Lead Product Security Engineer

Location: Chennai, India (Hybrid)

Job ID: 52177

Profile Summary:

The Product Vulnerability Management Lead operates the day-to-day product vulnerability management program across a diverse product portfolio. Reporting to the Senior Product Vulnerability Manager, this role turns enterprise standards into consistent execution by product teams, ensuring vulnerabilities are triaged, prioritized, remediated, disclosed, and reported in an auditable manner.

About HID Global

HID Global powers the trusted identities of the world’s people, places and things. We make it possible for people to transact safely, work productively and travel freely. Our trusted identity solutions give people secure and convenient access to physical and digital places and connect things that can be accurately identified, verified and tracked digitally. Millions of people around the world use HID products and services to navigate their everyday lives, and over 2 billion things are connected through HID. We work with governments, educational institutions, hospitals, financial institutions, industrial businesses, and some of the most innovative companies on the planet. Headquartered in Austin, Texas, HID Global has over 4500 employees worldwide and operates international offices that support more than 100 countries. HID Global® is an ASSA ABLOY Group brand. HID Global has is the trusted source for secure identity solutions for millions of customers and users around the world. In India, we have two Engineering Centre (Bangalore and Chennai). Global Engineering Team is based in Chennai and one of the Business Unit Engineering team is based in Bangalore. Check us out: www.hidglobal.com and https://youtu.be/23km5H4K9Eo

LinkedIn: www.linkedin.com/company/hidglobal/mycompany/

Are You Ready to Join the Team?

Our company is committed to finding the best and the brightest talent to help us reach the top. If you are a dynamic, highly skilled, experienced Cloud engineer and technology enthusiast, and you enjoy working in a rapid pace within a rapidly growing business environment, then you will want to consider this position. If you excel at communication, collaboration, and unrelenting innovation, we want to talk to you. And if you bring dedication, positive energy and integrity to the table, you just might be the right fit for our team.

Qualifications

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

Roles & Responsibilities (Other Duties May Be Assigned)

• Run vulnerability intake, triage, prioritization, remediation tracking, escalation, and closure processes across assigned product areas.


• Collaborate closely with Information Security, Development, Product Security, Legal, Privacy, and Compliance teams to coordinate vulnerability response activities.


• Assess, triage, prioritize, and coordinate remediation of vulnerabilities identified through SAST, SCA, secret scanning, penetration testing, security assessments, and external researchers.


• Track remediation commitments, validate progress with development teams, monitor SLA compliance, and elevate overdue or at-risk vulnerabilities.


• Lead emergency response or "fire-fighting" calls for urgent and critical vulnerabilities, bringing together the required stakeholders to define containment, remediation, validation, communication, and closure actions.


• Manage coordinated vulnerability disclosure activities, including external intake, researcher communications, vulnerability validation coordination, and disclosure timelines.


• Maintain vulnerability-management playbooks, operating procedures, exception workflows, risk-acceptance records, and evidence required for audits or customer inquiries.


• Support SBOM-driven response activities for third-party and open-source component vulnerabilities.


• Develop practical guidance and training that enable product teams to independently execute their vulnerability-management responsibilities.


• Produce clear operational and executive reporting on risk posture, remediation performance, disclosure activity, and program improvements.


• Identify gaps in adoption or process effectiveness and recommend scalable improvements.

Preferred Qualifications

• Familiarity with SBOMs, software supply-chain vulnerabilities, and open-source component governance.


• Experience in a large, multi-product or regulated environment.


• Relevant certifications such as CISSP, CSSLP, GIAC, or comparable credentials.

Experience and/or Education Qualification:

• 10-12 years of experience in product security, application security, PSIRT, vulnerability management, or a related security discipline.


• Demonstrated experience managing the end-to-end vulnerability lifecycle in a software or connected-product environment.


• Experience with application security capabilities and vulnerability sources, including SAST, SCA, secret scanning, penetration testing, and secure handling of credentials and secrets in development and CI/CD environments.


• Experience coordinating or participating in penetration testing, including reviewing findings, validating impact, and driving remediation.


• Strong understanding of vulnerability severity, CVSS, remediation prioritization, common application-security vulnerabilities, and secure software development practices.


• Experience coordinating response for urgent or critical security vulnerabilities under tight timelines.


• Experience with coordinated vulnerability disclosure or PSIRT operations.


• Ability to work effectively with distributed engineering teams and influence action without direct authority.


• Strong written and verbal communication skills, including the ability to communicate technical risk clearly to non-technical stakeholders.

Why apply?

• Empowerment: You’ll work as part of a global team in a flexible work environment, learning and enhancing your expertise. We welcome an opportunity to meet you and learn about your unique talents, skills, and experiences. You don’t need to check all the boxes. If you have most of the skills and experience, we want you to apply.


• Innovation: You embrace challenges and want to drive change. We are open to ideas, including flexible work arrangements, job sharing or part-time job seekers.


• Integrity: You are results-orientated, reliable, and straightforward and value being treated accordingly. We want all our employees to be themselves to feel appreciated and accepted.

This opportunity may be open to flexible working arrangements.

HID is an Equal Opportunity/Affirmative Action Employer - Minority/Female/Disability/Veteran/Gender Identity/Sexual Orientation.

We make it easier for people to get where they want to go!

On an average day, think of how many times you tap, twist, tag, push or swipe to get access, find information, connect with others or track something. HID technology is behind billions of interactions, in more than 100 countries. We help you create a verified, trusted identity that can get you where you need to go – without having to think about it.

When you join our HID team, you’ll also be part of the ASSA ABLOY Group, the global leader in access solutions. You’ll have 63,000 colleagues in more than 70 different countries. We empower our people to build their career around their aspirations and our ambitions – supporting them with regular feedback, training, and development opportunities. Our colleagues think broadly about where they can make the most impact, and we encourage them to grow their role locally, regionally, or even internationally. As we welcome new people on board, it’s important to us to have diverse, inclusive teams, and we value different perspectives and experiences.