Principal Security Engineer

Location: Bengaluru, India

Years of Experience: 12+ years

Job Summary: We are seeking a highly skilled Principal Security Engineer with extensive experience in Application Security, Cloud Security, and DevSecOps. The ideal candidate will have a proven track record in enterprise and regulated environments, demonstrating expertise in vulnerability assessment and penetration testing (VAPT), threat modeling, and secure software development lifecycle (SDLC) implementation. This role requires a hands-on approach to integrating security into CI/CD pipelines and collaborating with cross-functional teams to ensure secure application deployments.

Responsibilities

Conduct comprehensive vulnerability assessments and penetration testing across applications, APIs, web, mobile, and thick-client environments.
Implement secure SDLC practices aligned with industry standards such as OWASP Top 10, NIST, ISO 27001, PTES, and ASVS.
Perform threat modeling using STRIDE methodology to identify and mitigate potential security risks.
Manage the vulnerability lifecycle,



including identification, remediation, and reporting of security issues.
Conduct architecture security reviews to ensure compliance with security best practices.
Integrate security tools (SAST/DAST) into CI/CD pipelines using GitHub Actions and DevSecOps methodologies.
Provide guidance on cloud and container security, specifically with Docker and Kubernetes.
Collaborate with engineering, infrastructure, and business stakeholders to develop secure, scalable, and compliant enterprise solutions.

Mandatory Skills

Robust knowledge and experience in Application Security.
12+ years of experience in Application Security, Cloud Security, and DevSecOps.
Hands-on experience with SAST/DAST tools such as Fortify SCA/SSC, Checkmarx, Burp Suite, Invicti (Netsparker), Qualys, and Nessus.
Proven ability to manage vulnerability lifecycle and perform architecture security reviews.
Experience in integrating secu

📌 TECHNICAL LEAD (Bengaluru)
🏢 Happiest Minds Technologies
📍 Bengaluru