Staff Product Security Engineer

DHR Holding India; Bengaluru; On-site; INR 3,000,000 - 7,000,000; Full time

Job summary

DHR Holding India in Bengaluru, India seeks a Staff Product Security Engineer for an on-site role to strengthen security across our diagnostics and biotechnology products.

You will lead security initiatives, architect secure solutions for software and embedded systems, and drive vulnerability identification and remediation to raise the product security baseline.

Qualifications

• Bachelors degree in Computer Science, Cybersecurity, or a related technical field; Masters degree preferred
• Minimum of 7 years of experience in product security, application security, or a closely related technical cybersecurity role, preferably within a regulated industry such as medical devices.
• Ability to critically review and influence secure architectural designs for complex software and hardware products, including embedded systems, applications, and networked solutions.
• Deep understanding of secure networking, hardening, communication protocols, cryptography, authentication, and authorization mechanisms.
• Proven ability in identifying and mitigating security vulnerabilities through activities such as Penetration Testing/Red Teaming, Secure Code Development, Code Reviews, Bug Hunting

Responsibilities

• Lead Security Initiatives: Oversee and drive the implementation of state-of-the-art security controls and features, advancing the overall security posture of our diagnostic products from conception to completion.
• Architect Secure Solutions: Design and review secure architectures for complex software and hardware products, including embedded systems and networked solutions, setting technical standards for product security.
• Vulnerability identification: Identify design issues and technical vulnerabilities through manual and automated architecture reviews, code audits and vulnerability scans.
• Vulnerability remediation: Develop effective and robust fixes for identified issues that can be rolled out across products.
• Drive Standardization: Create reference implementations and foster standardization for crucial security features, ensuring consistent and robust security baselines across our entire product portfolio.

Skills

Security architecture

Vulnerability remediation

Penetration testing

Secure coding

Code reviews

Threat modeling

Education

Bachelor's degree in Computer Science or Cybersecurity

Masters degree preferred

Job description

Job Summary

Bring more to life.

Are you ready to accelerate your potential and make a real difference within life sciences, diagnostics and biotechnology

The Staff Product Security Engineer is responsible for driving new security initiatives and integrating modern security features into our products. Your role will involve leading the proper and timely implementation of security best practices and vulnerability remediation across all product lines at a technical and architecture level. Furthermore, you will design and implement security features that establish the standard for our product development. You will be working in a team of like-minded technical security enthusiasts that are passionate about elevating the security posture of our product line.

This position reports to the Chief Product Security Engineer and is part of the Product Security Engineering Team located in Bengaluru, India and will be an on-site role.

In this role, you will have the opportunity to:

• Lead Security Initiatives: Oversee and drive the implementation of state-of-the-art security controls and features, advancing the overall security posture of our diagnostic products from conception to completion.
• Architect Secure Solutions: Design and review secure architectures for complex software and hardware products, including embedded systems and networked solutions, setting technical standards for product security.
• Vulnerability identification: Identify design issues and technical vulnerabilities through manual and automated architecture reviews, code audits and vulnerability scans.
• Vulnerability remediation: Develop effective and robust fixes for identified issues that can be rolled out across products.
• Drive Standardization: Create reference implementations and foster standardization for crucial security features, ensuring consistent and robust security baselines across our entire product portfolio.

The essential requirements of the job include:

• Bachelors degree in Computer Science, Cybersecurity, or a related technical field; Masters degree preferred
• Minimum of 7 years of experience in product security, application security, or a closely related technical cybersecurity role, preferably within a regulated industry such as medical devices.
• Ability to critically review and influence secure architectural designs for complex software and hardware products, including embedded systems, applications, and networked solutions.
• Deep understanding of secure networking, hardening, communication protocols, cryptography, authentication, and authorization mechanisms.
• Proven ability in identifying and mitigating security vulnerabilities through activities such as Penetration Testing/Red Teaming, Secure Code Development, Code Reviews, Bug Hunting

It would be a plus if you also possess previous experience in:

• Industry certifications, such as OSCP/OSCE, CISSP, GIAC, CEH or Hack the Box
• Familiarity with cloud security principles and architecture (Azure, AWS)