Lead threat modeling and secure design reviews for complex, multi-service features and drive security requirements into production.
Conduct advanced vulnerability assessments and penetration testing across web platforms, APIs, and iOS and Android applications.
Plan and execute red team and purple team exercises and translate attack paths into durable architectural fixes.
Perform manual and automated source code reviews and help eliminate vulnerability classes at the framework or platform level.
Own the integration, tuning, scaling, and automation of SAST, DAST, SCA, secret scanning, and container scanning tools in CI/CD pipelines.
Drive cloud security reviews and hardening for AWS, Kubernetes/EKS, and containerized workloads, including identity, tenant isolation, network controls, and secrets management.
Contribute to AI/LLM security through threat modeling, prompt-injection and data-leakage controls, tenant isolation, and secure SDLC patterns.
Own vulnerability remediation tracking and help operate the self-managed bug bounty program.
Define security coverage, remediation SLA, and mean-time-to-remediate metrics.
Provide secure-coding guidance, security consultations, code reviews, and mentorship to SE1 and SE2 engineers.
Drive security culture initiatives and contribute to ISO 27001 readiness, TPRM, and BCP/BIA efforts.
Requirements
5–7 years of hands-on product security or application security experience with end-to-end ownership of security workstreams.
Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field is preferred.
Experience leading threat modeling sessions and integrating findings into the SDLC across cross-functional teams.
Strong web and API security assessment skills, including OWASP Top 10, authentication, authorization, session management, and business-logic vulnerabilities.
Manual source code review experience and ability to reason about Java, https://jobeax.com/link/JSd7UYCSg572jJDY, Python, and React code.
Experience integrating and tuning security tooling in CI/CD pipelines and building custom security automation.
Cloud security experience with AWS or GCP and working knowledge of Docker and Kubernetes security.
Experience planning and executing red team or purple team exercises.
Working knowledge of Android and iOS application security assessments, OWASP MASVS, and mobile-specific vulnerabilities.
Familiarity with Frida, Objection, Drozer, and MobSF.
Strong analytical, problem-solving, communication, risk-prioritization, and mentoring skills.
Relevant certifications such as OSCP, OSWE, GWAPT, or CKS are beneficial.
Bug bounty participation, published CVEs, security research, conference speaking, AI/LLM security, software supply-chain security, and knowledge of India’s DPDP Act or CERT-In directions are beneficial.
Benefits
Competitive cash and equity-based compensation tailored to role, experience, and skills.
Extensive medical insurance for employees and their families, plus telehealth, wellness events, and fitness-related perks.
Generous leave policies, parental support, retirement benefits, and learning and development assistance.
... Canada, and the UK. Pre-IPO. About the Role : We are looking for a hands-on Security Engineer III to strengthen our cloud, application, and infrastructure security. You will work closely with Engineering, DevOps, and IT teams to identify risks, implement security controls, automate security processes, and ensure compliance ...
... Investigate security incidents, perform root-cause analysis, and implement preventive measures. - Partner with Engineering, DevOps, IT, and Product teams to embed security into everyday workflows. Requirements - 6–10 years of experience in information security, cloud security, application security, or DevSecOps. - Strong hands-on ...
... – or even gossiping over chai. So, if a day filled with building impactful solutions with a fun team sounds appealing to you, join us. About the Role As a Security Engineer 3, you are a senior individual contributor who owns security outcomes end to end across one or more product areas. You operate with limited supervision, ...
... execution, you’ll be inspired, connected, developed and rewarded here. Everything that makes you unique is welcome; join us and let’s build what’s next - together! Security Engineer III -SOC Gurugram, India At Anaplan, we are a team of innovators focused on optimizing business decision-making through our leading AI-infused scenario ...
... https://jobeax.com/link/gzRoWDLB6epXFlKs Role : We're looking for a Security Engineer III with hands-on experience in web and Android penetration testing, DevSecOps pipeline hardening, and security automation. You should be current with the evolving threat landscape and skilled at leveraging AI to improve security tooling and https://jobeax.com/link/QDHtuLOM9AQP8P6s ...
Medtronic seeks a Senior Product Security Engineer to integrate cybersecurity throughout the product lifecycle for medical devices and connected healthcare solutions. The role involves conducting security assessments, threat modeling, vulnerability management, and compliance activities across Class I-III devices while collaborating ...
Thermo Fisher Scientific seeks a DevSecOps Engineer to design, build, and maintain secure software deployment pipelines on AWS cloud infrastructure. The role combines infrastructure automation, cloud security, and CI/CD optimization to support life-science research and development initiatives. Responsibilities - Design, ...
Senior DevOps engineer role at Thermo Fisher Scientific in Bangalore focused on designing and maintaining secure, scalable AWS infrastructure and CI/CD platforms. Position involves Infrastructure as Code, cloud security implementation, generative AI deployment using Amazon Bedrock, and mentoring junior team members. Responsibilities ...
... engineers or leading technical initiatives. Education and Experience · Bachelor’s or master’s degree in Computer Science, Engineering, or a related field. · Staff Engineer : Typically 12+ years of relevant software development experience, depending on internal Band 7 expectations. · Engineer III : Typically 6+ years of relevant ...
... ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Product Support Engineer III to join our team in a hybrid capacity based in Bangalore, ...