Senior Product Security Engineer

Computer Futures; India; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Computer Futures is seeking an experienced Senior Product Security Engineer to help build and scale security across a rapidly growing cloud-native technology platform.

You will work with software engineers, platform engineers, and SRE teams to embed security into the software development lifecycle and drive initiatives across product development, cloud infrastructure, AI-powered systems, threat detection, and compliance automation.

Qualifications

• Experience integrating security into the SDLC across cloud-native platforms.
• Knowledge of threat modeling and security architecture reviews.
• Hands-on security engineering in modern cloud environments (AWS preferred).
• Familiarity with SAST, DAST, and software supply-chain security scanning.
• Experience securing containerized and Kubernetes workloads.

Responsibilities

• Lead application security initiatives across the software development lifecycle.
• Conduct security architecture and design reviews.
• Perform threat modeling for new products and features.
• Design and improve secure development practices.
• Integrate security controls into CI/CD pipelines.
• Partner with engineering teams to remediate vulnerabilities.
• Define and maintain secure coding standards.
• Perform penetration testing against web apps, APIs, and internal services.
• Identify vulnerabilities and validate remediation efforts.
• Develop testing methodologies and attack simulations.
• Coordinate and manage penetration testing engagements from planning through reporting.
• Improve security posture across AWS-based infrastructure.
• Assess IAM, network segmentation, and access-control issues.
• Secure containerized and Kubernetes-based workloads.
• Implement controls for secrets management and software supply-chain security.
• Drive security automation across infrastructure and deployment platforms.
• Design and improve automated detection and response capabilities.
• Manage and tune security monitoring solutions.
• Create and optimize detection rules, alerts, and response workflows.
• Investigate and respond to security incidents affecting applications and infrastructure.
• Develop protections against common web app threats such as SQLi and XSS.

Skills

Threat modeling

Security design reviews

Secure SDLC

SAST

DAST

CI/CD security

AWS security

IAM governance

Network security

RBAC

Job description

We are seeking an experienced Senior Product Security Engineer to help build and scale security across a rapidly growing cloud-native technology platform.

This role sits within the engineering organization and works closely with software engineers, platform engineers, and SRE teams to embed security throughout the software development lifecycle. You will drive security initiatives across product development, cloud infrastructure, AI-powered systems, threat detection, and compliance automation.

This position is ideal for a hands-on security engineer who enjoys partnering with engineering teams, building automation, and improving security at scale.

What You'll Do

Application & Product Security

• Lead application security initiatives across the software development lifecycle.
• Conduct security architecture and design reviews.
• Perform threat modeling for new products and features.
• Design and improve secure development practices.
• Integrate security controls into CI/CD pipelines.
• Partner with engineering teams to remediate security vulnerabilities.
• Define and maintain secure coding standards.

Penetration Testing & Offensive Security

• Perform penetration testing against web applications, APIs, and internal services.
• Identify vulnerabilities and validate remediation efforts.
• Develop testing methodologies and attack simulations.
• Coordinate and manage penetration testing engagements from planning through reporting.
• Improve security posture across AWS-based infrastructure.
• Assess and remediate IAM, network segmentation, and access-control issues.
• Secure containerized and Kubernetes-based workloads.
• Implement controls for secrets management and software supply-chain security.
• Drive security automation across infrastructure and deployment platforms.

Security Monitoring & Detection Engineering

• Design and improve automated detection and response capabilities.
• Manage and tune security monitoring solutions.
• Create and optimize detection rules, alerts, and response workflows.
• Investigate and respond to security incidents affecting applications and infrastructure.
• Develop protections against attacks such as SQL Injection, Cross-Site Scripting (XSS), and other web application threats.

AI Security

• Evaluate security risks associated with AI and LLM-powered products.
• Assess and mitigate prompt injection, jailbreak, and data leakage risks.
• Implement controls governing AI agents, permissions, and sensitive data access.

Security Compliance & Automation

• Build technical controls to support security and compliance requirements.
• Automate evidence collection and security reporting processes.
• Support customer security reviews and technical due diligence activities.
• Partner with auditors and stakeholders during security assessments and certification programs.

Required Qualifications

Secure Software Development

• Experience implementing security practices within modern software development environments.
• Strong knowledge of:
• Threat modeling
• Security design reviews
• Secure SDLC
• SAST
• DAST
• Dependency and supply-chain security scanning
• Hands-on experience securing cloud environments, preferably AWS.
• Understanding of:
• IAM design and governance
• Network security architecture
• RBAC and workload permissions
• CI/CD security controls

Security Detection & Incident Response

• Experience operating or engineering security monitoring systems such as:
• SIEM
• WAF
• IDS/IPS
• Runtime application protection technologies
• Ability to investigate, respond to, and remediate security incidents.

Application Security Engineering

• Experience securing modern web applications and APIs.
• Strong understanding of common application security vulnerabilities and mitigation techniques.

Communication Skills

• Ability to work effectively within globally distributed engineering teams.
• Professional English communication skills.

Location

• Currently based in Japan or willing to relocate