Remote: Hybrid

Senior Product Security EngineerExperience:10–12+ YearsEmployment Type:Contract / Full-TimeLocation:Bangalore (Hybrid)Industry:FinTech / Financial ServicesJob Summary:We are seeking an experiencedSenior Product Security Engineerto help strengthen the security of our products and services throughout the entire software development lifecycle. This role will play a critical hands-on role in defining and implementing product security strategies, embedding security into engineering and product development processes, and protecting customer data.The ideal candidate will have strong expertise inapplication security, product security, cloud security, secure SDLC, DevSecOps, vulnerability management, and security automation , with proven experience working closely with engineering, product, and platform teams.Key Responsibilities:Support the development and execution of a comprehensiveProduct Security strategyaligned with business objectives, security requirements, and organizational risk appetite.Partner with Engineering and Product teams to foster a strongsecurity-first cultureand promote security ownership across the organization.Integrate security best practices, automated security controls, and tooling throughout theSoftware Development Lifecycle (SDLC) .Perform and supportsecurity architecture reviews, threat modeling, vulnerability assessments, and secure design reviews .Establish and enforce secure development standards coveringAPI security, secure coding, infrastructure-as-code (IaC), application architecture, and cloud environments .Lead and manage application security programs coveringSAST, DAST, IAST, SCA,



vulnerability management, and manual penetration testing .Implement and manage product security tooling across web and mobile applications, includingAPI security, mobile application protection, runtime security, and application scanning .Partner closely with Engineering, Product, DevOps, Cloud, and Platform teams to identify, prioritize, track, and remediate security vulnerabilities.Develop and improve security automation withinCI/CD pipelinesto identify and prevent vulnerabilities earlier in the development lifecycle.Establish and maintain processes forproduct security incident response , vulnerability disclosure, investigation, remediation, and post-incident improvements.Work with engineering and product teams to enhance application security features and security controls.Evaluate emerging threats, vulnerabilities, attack techniques, and security technologies and continuously improve product security controls.Provide security guidance to developers and engineering teams on secure coding, application architecture, APIs, cloud security,



and vulnerability remediation.Communicate security risks and recommendations effectively to both technical and non-technical stakeholders.Required Qualifications:10–12+ years of experiencein Product Security, Application Security, Application Security Engineering, DevSecOps, or a closely related security engineering role.Deep technical knowledge ofweb and mobile application securityand common vulnerabilities, including theOWASP Top 10 .Solid understanding ofsecure software development practicesand secure SDLC methodologies.Hands-on experience implementing and managingProduct Security and Application Security tools .Strong experience withSAST, DAST, IAST, SCA, vulnerability scanning, and penetration testing .Strong understanding ofAPI security , including authentication, authorization, API vulnerabilities, and API security testing.Strong understanding ofCI/CD pipelinesand integrating security tools and controls into DevOps workflows.Hands-on experience with security automation andDevSecOps practices .Experience securingmobile applicationsand implementing mobile application protection/security controls.Strong understanding ofAWS cloud security principles and services .Experience withInfrastructure as Code (IaC) securityand cloud-native application security.Experience conductingthreat modeling, security assessments, architecture reviews, and vulnerability remediation .Strong ability to collaborate with Engineering, Product, Platform, and DevOps teams.Excellent written and verbal communication skills with the ability to explain complex security concepts to technical and non-technical audiences.Ability to operate effectively in afast-paced, highly collaborative environment .

📌 Senior Product Security Engineer (Mumbai)
🏢 enableIT
📍 Mumbai