We are hiring for this position on behalf of one of our product-based technology clients.

We are looking for a hands-on security leader to shape product security across SaaS and customer-managed/on-premises platforms. Depending on experience, this position can be structured as a Principal Engineer role or an Engineering Manager role leading a small security team.

Key Responsibilities

- Define security architecture for recent products, services, and features
- Lead secure design across SaaS, on-premises, cloud, Kubernetes, and container environments
- Design trusted and confidential computing capabilities, secure boot, hardware attestation, and workload isolation
- Own secrets, keys, credentials, encryption, rotation, and vault integrations
- Establish and manage secure SDLC practices, including code scanning, CI/CD security controls, artifact signing, and software supply-chain security
- Conduct architecture reviews, threat modelling, vulnerability management, and penetration testing
- Support compliance programs such as SOC 2 Type 2, ISO 27001, FIPS 140, NIST 800, and FedRAMP
- Partner with auditors, engineering, product, GRC, and customer-facing teams
- Prepare security whitepapers, design documents, and customer-facing security responses




- Contribute to security incident readiness, response processes, and program metrics

What We’re Looking For

- Strong experience in software, application, or product security
- Experience securing SaaS and on-premises/customer-managed software products
- Hands-on expertise in several areas, including:

– Cloud-native, Kubernetes, and container security

– Network security and tenant isolation

– Cryptography and secrets management

– Trusted or confidential computing

– Secure SDLC and software supply-chain security

- Experience implementing at least one major compliance framework such as SOC 2, ISO 27001, FIPS, FedRAMP, or NIST 800
- Experience managing vulnerability assessment and penetration-testing programs
- Strong technical leadership and written communication skills
- Ability to balance strong security controls with product delivery priorities

Good to Have

- Direct FedRAMP authorization experience
- Experience with GPU, HPC, or AI/ML infrastructure security
- Knowledge of TPMs, hardware attestation, SEV-SNP, TDX, or confidential computing
- Experience supporting enterprise customer security reviews and sales discussions

📌 Principal Software Engineer / Engineering Manager – Security (Bengaluru)
🏢 ULTISOURCE
📍 Bengaluru