Software Security Master

Ericsson; Dadri; Sur place; INR 3 000 000 - 4 500 000; Plein temps

Résumé du poste

Ericsson is seeking a Software Security Master to be the security SME across the development lifecycle. The role embeds security by design throughout architecture, development, testing, CI/CD, release, deployment, and operations, combining hands-on security engineering with threat modeling and risk management.

You will drive secure practices, perform security reviews, coordinate remediation of findings, and coach teams on secure development.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Software Engineering, Cybersecurity, Information Security, or equivalent experience.
• Hands-on experience in software security, product security, or DevSecOps throughout the development lifecycle.
• Experience with threat modeling, security risk assessments, secure coding, code reviews, vulnerability analysis, and security testing.

Responsabilités

• Drive security by design across the software development lifecycle.
• Conduct security and privacy risk assessments and threat modeling for products and features.
• Identify security risks, attack surfaces, data, and required controls.
• Translate risks into security requirements, mitigations, and verification activities.
• Promote secure coding, least privilege, defense in depth, and data protection practices.
• Coordinate security design reviews, secure code reviews, and root-cause analysis of issues.
• Integrate automated security controls into CI/CD pipelines (SAST, DAST, SCA, vulnerability scanning, secrets detection).
• Analyse CVEs and vulnerabilities across apps, containers, cloud, OS, and dependencies.
• Assess remediation actions and target resolution dates; coordinate critical/high-risk remediation.
• Plan penetration testing and vulnerability assessments; ensure documentation and traceability.

Connaissances

Software security

Threat modeling

DevSecOps

Risk assessment

Secure code reviews

CI/CD security

Vulnerability analysis

Security testing

Formation

Bachelor/Master in CS or related

Outils

SAST

DAST

SCA

Vulnerability scanning

Secrets detection

Penetration testing

Description du poste

Join our Team

About this opportunity:

We are looking for a Software Security Master, a senior technical specialist responsible for enabling end-to-end software security across the development lifecycle. You will act as a security subject-matter expert for engineering teams, embedding security by design across architecture, development, testing, CI/CD, release, deployment, and operations. The role combines hands-on security engineering with threat modeling, vulnerability management, DevSecOps, risk management, security testing, and coaching.

What you will do:

• Drive security by design throughout the software development lifecycle.
• Conduct security and privacy risk assessments and threat modeling for products and features.
• Identify security risks, attack surfaces, sensitive data, trust boundaries, and required security controls.
• Translate identified risks into security requirements, mitigations, and verification activities.
• Promote secure coding, least privilege, defense in depth, secure authentication and authorization, and data protection practices.
• Perform or coordinate security design reviews, secure code reviews, and root-cause analysis of security issues.
• Integrate automated security controls into CI/CD pipelines, including SAST, DAST, SCA, vulnerability scanning, and secrets detection.
• Analyse CVEs and vulnerabilities affecting applications, platforms, containers, cloud services, operating systems, and third-party dependencies.
• Assess vulnerability severity, exploitability, impact, remediation actions, and target resolution dates.
• Coordinate remediation of critical and high-severity security findings and support risk acceptance where required.
• Plan and review penetration testing, vulnerability assessments, and security verification activities.
• Ensure security risks, test results, remediation actions, and release evidence are properly documented and traceable.
• Provide security guidance for release readiness, deployment, and post-release activities.
• Coach developers, architects, testers, DevOps, SRE, and operations teams on secure development practices.
• Promote security awareness and knowledge sharing across engineering teams.
• Collaborate with product, engineering, architecture, privacy, legal, compliance, operations, and security stakeholders.

The skills you bring:

1. Bachelor’s or Master’s degree in Computer Science, Software Engineering, Cybersecurity, Information Security, or equivalent experience.
2. Strong professional experience in Software Security, Product Security, Application Security, Secure Software Development, or DevSecOps.
3. Hands‑on experience with threat modeling, security risk assessments, secure coding, code reviews, vulnerability analysis, and security testing.
4. Experience analysing CVEs and security findings across applications, operating systems, containers, cloud platforms, and third‑party dependencies.
5. Strong understanding of vulnerability remediation, mitigation, dependency management, and risk acceptance.
6. Experience integrating security controls into CI/CD pipelines.
7. Knowledge of SAST, DAST, SCA, vulnerability scanning, secrets detection, and penetration testing.
8. Understanding of APIs, distributed systems, IAM, network security, cryptography, and data protection.
9. Experience with Kubernetes, containers, Cloud Native technologies, Infrastructure as Code, and security automation is preferred.
10. Familiarity with security standards and frameworks such as OWASP, CWE/SANS Top 25, NIST, and ISO 27001.
11. Experience in telecommunications, cloud-native platforms, distributed systems, or complex software environments would be advantageous.
12. Strong analytical and risk-based decision‑making skills.
13. Certifications such as CISSP, CSSLP, OSCP, or GIAC would be an added advantage.

Why join Ericsson?

At Ericsson, you´ll have an outstanding opportunity. The chance to use your skills and imagination to push the boundaries of what´s possible. To build solutions never seen before to some of the world’s toughest problems. You´ll be challenged, but you won’t be alone. You´ll be joining a team of diverse innovators, all driven to go beyond the status quo to craft what comes next.

Encouraging a diverse and inclusive organization is core to our values at Ericsson, that’s why we champion it in everything we do. We truly believe that by collaborating with people with different experiences we drive innovation, which is essential for our future growth. We encourage people from all backgrounds to apply and realize their full potential as part of our Ericsson team. Ericsson is proud to be an Equal Opportunity Employer. learn more.

Primary country and city: India (IN) || Chennai