Senior Security Engineer - Product Security

Ecolab; Bengaluru; On-site; INR 2,400,000 - 3,600,000; Full time

Job summary

Ecolab seeks a Senior Security Engineer focused on Product Security to embed security into the Software Development Lifecycle. You will lead vulnerability management, secure coding practices, and architectural reviews across mobile, web, API, and IoT apps.

You will drive SAST/DAST activities, mentor dev teams, and advance DevSecOps integration while staying ahead of emerging AI/LLM security concerns. Strong collaboration is essential.

Qualifications

• Bachelor's degree in computer science, information technology or related discipline.
• 6-8 years of experience in the Product Security domain.
• Hands-on application security, secure coding and testing experience.

Responsibilities

• Conduct Product Security Risk Assessments for Mobile, Web, API, and IoT apps.
• Perform and remediate findings from SAST, DAST, and manual pen tests.
• Simulate attacks and generate vulnerability reports.
• Collaborate with internal teams for security testing.
• Review software for potential security flaws and risks.
• Guide engineering on secure development practices and remediation.
• Deliver secure coding training to developers.
• Perform secure source code reviews and mitigations.
• Act as technical liaison for CI/CD and DevSecOps integration.
• Automate security processes in development pipelines.
• Stay updated on threats and countermeasures.
• Build relationships with stakeholders and business partners.

Skills

OWASP Top 10

CWE Top 25

Data protection

Cloud architecture

SAST

DAST

Container security

Penetration testing

Secure code reviews

CI/CD security

Web Application Firewall

LLM/AI security

Prompt injection

Data poisoning

Model theft mitigation

API security

IaC security

Secrets management

Threat modeling

Python

JavaScript/TypeScript

Java

C#/.NET

Apex

Education

Bachelor’s degree in CS/IT or related

Tools

Snyk

Qualys

Burp Suite

Wiz

Postman

MobSF

Elastic

Agentic Scanner

Job description

Overview

Ecolab’s Information Security team is seeking a Senior Security Engineer with strong expertise in Product Security to lead and enhance secure software development practices across the organization. This role focuses on integrating security into the Software Development Lifecycle (SDLC), identifying and mitigating application vulnerabilities, and guiding development teams on secure coding and architecture. The ideal candidate will have hands‑on experience in application security, penetration testing, secure code reviews, and AI/LLM security.

Minimum Qualification

• Bachelor’s degree in computer science, information technology or related discipline.
• 6 - 8 years of experience in the Product Security domain.

Roles And Responsibilities

• Conduct Product Security Risk Assessments for Mobile, Web, API, and IoT applications.
• Perform and remediate findings from SAST, DAST, and manual penetration testing.
• Simulate attacks and generate detailed vulnerability reports.
• Collaborate with internal teams for automated and manual security testing.
• Review software applications for potential security flaws.
• Guide engineering teams on secure development practices and remediation strategies.
• Deliver secure coding training to development and engineering teams.
• Perform secure source code reviews and recommend mitigation strategies.
• Act as a technical liaison for CI/CD and DevSecOps integration.
• Automate security processes and integrate them into development pipelines.
• Stay updated on emerging threats, vulnerabilities, and countermeasures.
• Build and maintain strong relationships with stakeholders and business partners.

Technical Skills & Expertise

• Strong expertise in OWASP Top 10, CWE Top 25, and data protection principles.
• Solid understanding of application architecture in multi-cloud and hybrid environments.
• Hands‑on experience with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Container Security, and manual penetration testing.
• Proficiency in interpreting and writing code in Python, JavaScript/TypeScript, Java, C# (.NET), and Apex.
• Deep knowledge of software vulnerabilities, secure design patterns, and threat mitigation strategies.
• Experience integrating security into CI/CD pipelines and Developers workflows.
• Strong working knowledge of Web Application Firewall (WAF) technologies
• Knowledge on OWASP Top 10 for LLMs and emerging AI security frameworks.
• Understanding of Prompt Injection, Data Poisoning, and Model Theft threats.
• Experience securing AI APIs, ML pipelines, and LLM‑based applications.
• Knowledge of API Security, Infrastructure as Code (IaC) Security, and Secrets Management.
• Experience in Threat Modelling and Attack Simulation techniques

Security Tools & Technologies

• Web Application Firewalls (WAF): Fastly, Cloudflare, Akamai
• Tools: Snyk, Qualys, Burp Suite, Wiz, Postman, MobSF, Elastic, Agentic Scanner
• Cloud: Azure, AWS, GCP
• SCM: ADO, GitHub

Our Commitment to a Culture of Inclusion & Belonging

Ecolab is committed to fair and equal treatment of associates and applicants and furthering the principles of Equal Opportunity to Employment. We will recruit, hire, promote, transfer and provide opportunities for advancement based on individual qualifications and job performance in all matters affecting employment, compensation, benefits, working conditions, and opportunities for advancement. Ecolab will not discriminate against any associate or applicant for employment because of race, religion, color, creed, national origin,citizenship status, sex, sexual orientation, gender identity and expressions, genetic information, marital status, age, or disability.