Description

As a Product Security Specialist, you will be responsible for driving product security through threat modeling, secure design reviews, vulnerability management, security testing, and DevSecOps practices. The specialist will collaborate with Engineering, Architecture, Product Security Managers to identify risks, drive remediation, strengthen the product security posture, and ensure compliance with customer and industry security requirements.

Your responsibilities

- Drive product security across the entire product lifecycle, including both active development and maintenance releases in production, through threat modeling, secure design reviews, risk assessments, and security-by-design practices.
- Define, propose, and drive adoption of product security requirements, standards, and controls aligned with customer expectations, industry frameworks, and emerging threat landscapes.
- Identify security gaps and continuously improve the product security posture by leveraging AI-powered security scanning, code analysis, vulnerability discovery, risk prioritization, and security insights. Lead vulnerability management activities, including CVE/CVSS assessment, security advisories, remediation planning, root cause analysis, and closure of security findings across released and in-development products.
- Design, review, and strengthen security controls for Kubernetes, containers, APIs, IAM, and cloud-native microservices architectures,



ensuring adherence to OWASP and secure coding best practices.
- Integrate and automate security testing, monitoring, and compliance validation within DevSecOps and CI/CD pipelines, including SAST, DAST, container, dependency, and configuration scanning. Collaborate with Engineering, Architecture, and Product Security teams to assess risks, prioritize mitigations, support compliance initiatives, and enhance telecom product security.

Your skills and experience

- Engineering degree with 8+ years of relevant experience. Strong expertise in Product Security and the Secure Software Development Lifecycle (SSDLC), including threat modeling, secure architecture and design reviews, risk assessments, threat analysis, and security-by-design practices for cloud-native products.
- Hands-on experience securing Kubernetes, OpenShift, containers, microservices, APIs, service mesh, IAM/RBAC, secrets management, and cloud-native platforms.
- Solid knowledge of Application Security and DevSecOps, including OWASP Top 10, secure coding practices, SAST, DAST, SCA, container security, dependency scanning, Infrastructure as Code (IaC) security, and CI/CD security automation.
- Security Architecture, Scanning Tools, Threat Analysis, Data Privacy, Scripting (Python), Security Test Automation, Cloud and Kubernetes Security Certifications, Agentic AI tools, OAM/OSS/EMS/NMS Domain Experience

📌 Product Security Specialist (Bengaluru)
🏢 NOKIA
📍 Bengaluru