Key Responsibilities

- Design, develop, and maintain security features, tools, frameworks, and automation for enterprise-scale products and platforms.

- Contribute to secure architecture and design reviews for new and existing systems.

- Perform threat modeling, risk assessment, and security reviews for product features, services, APIs, and infrastructure components.

- Identify, analyze, and remediate security vulnerabilities in application code, services, cloud infrastructure, and third-party dependencies.

- Build and improve security automation for vulnerability detection, remediation, compliance validation, secrets management, and policy enforcement.

- Partner with engineering teams to implement secure coding practices and security-by-design principles.

- Expertise in using AI to build Security Code Scanning, Patching and CVE discovery similar to SAST, DAST, SCA, container security, and identity systems.

- Work on authentication, authorization, access control, encryption, key management, audit logging, and secure communication mechanisms.

- Participate in incident response activities, root cause analysis, and long-term remediation planning when required.

- Define and implement security best practices for cloud-native, distributed, and microservices-based environments.

- Mentor junior engineers and help raise the security engineering maturity of the broader organization.

- Create technical documentation, design specifications, security guidelines, and operational runbooks.

Required Qualifications




- Bachelor's or Master's degree in Computer Science, Computer Engineering, Cybersecurity, or a related technical field.

- 8+ years of software development experience, with at least 4+ years focused on security engineering, application security, product security, or cloud security.

- Strong programming experience in one or more languages such as Go, Python, or Rust.

- Deep understanding of secure software development lifecycle practices.

- Strong knowledge of application security concepts, including OWASP Top 10, secure coding, input validation, authentication, authorization, session management, and API security.

- Experience with threat modeling, security architecture reviews, and vulnerability remediation.

- Positive understanding of cryptography fundamentals, TLS, PKI, encryption, hashing, signing, and key management.

- Experience with cloud platforms such as AWS, Azure, or GCP.

- Familiarity with container and Kubernetes security concepts.

- Experience with CI/CD security, DevSecOps practices, and security automation.

- Strong debugging, problem-solving, and analytical skills.

- Ability to work independently on complex technical problems with minimal supervision.

- Excellent written and verbal communication skills.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Security Software Engineer (Pune)
🏢 Veritas Software Technologies India Private
📍 Pune