Digital Technology Specialist - Product Security in भारत

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Digital Technology Specialist – Product Security based in India. The Digital Technology Specialist – Product Security will play a critical role in protecting software products, applications, and development environments against evolving cybersecurity threats. You will combine hands-on offensive security expertise with software engineering knowledge to identify vulnerabilities and strengthen security throughout the Software Development Lifecycle (SDLC). Working closely with developers, architects, and DevOps teams, you will embed security practices into product design, coding, testing, and deployment. The role also focuses on emerging AI security challenges, including risks associated with AI-generated code, large language models, and AI-enabled applications. You will help automate security controls, improve vulnerability management, and promote secure-by-design engineering practices. This is an opportunity to contribute to innovative technology initiatives within a global energy-focused environment while advancing modern product security capabilities. Accountabilities - Application and product security: Perform penetration testing and vulnerability assessments across web applications, APIs, cloud environments, and containerized applications. Identify, validate, prioritize, and communicate security findings, working with development teams to drive effective remediation. - Threat modeling and secure design: Conduct threat modeling and security design reviews for new products, features, and applications, providing practical recommendations to reduce security risks from the outset.

- Secure SDLC and DevSecOps: Integrate security controls throughout the Software Development Lifecycle and collaborate with developers, architects, and DevOps teams to implement security-by-design principles. - Security automation: Integrate and optimize security tools within CI/CD pipelines, support security automation initiatives, and contribute to policy-as-code practices. - Application security testing: Execute and interpret results from Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), container security scanning, secret detection, and code scanning tools. - Vulnerability management: Triage security findings, reduce false positives, assess risk based on business and technical impact, and coordinate remediation with engineering teams. - Cloud and container security: Assess and strengthen the security of cloud-native applications, containerized workloads, Kubernetes environments, and infrastructure-as-code configurations. - AI security and AI-SSDLC: Evaluate security risks associated with AI-assisted software development and AI-enabled applications, contributing to the implementation of an AI Secure Software Development Lifecycle. - AI threat assessment: Review AI-generated code for vulnerabilities and unsafe design patterns, contribute to AI threat modeling, and assess risks involving AI agents, prompt injection, model misuse, and AI supply chain security. - Developer enablement: Deliver security coaching, awareness sessions, and technical guidance to engineering teams, helping developers understand vulnerabilities and apply secure coding practices. - Security standards and best practices: Develop actionable security guidelines, technical standards, and recommendations that promote a consistent security-first culture across product engineering teams. - Continuous improvement: Monitor emerging cybersecurity threats, security technologies, and AI-related risks to strengthen product security practices and improve the effectiveness of security controls. Requirements - Bachelor's or Master's degree in Computer Science, Cybersecurity, Software Engineering, or a related technical discipline.