Senior Security Engineer - Product Security Location: Bangalore Experience: 4-7 years Must Have: Experience in Consumer facing Product companies What this role is about We’re looking for a hands-on Product Security Engineer who enjoys breaking things (ethically), understanding how systems actually work, and fixing security issues before they become incidents. You’ll work closely with engineering teams to secure our web, mobile, and API platforms and help embed security naturally into how products are built. This is not a policy-only or tool-only role. You’ll be close to the code, architecture, and developers. What you’ll do (day to day) Review applications and APIs for real-world security issues, not just OWASP checklists Threat model new features and architecture changes before they go live Test web and mobile applications through hands-on black-box testing Help developers fix vulnerabilities and explain why they matter Set up and maintain security checks in CI/CD pipelines (SAST, SCA, IaC scanning) Coordinate penetration tests, review findings,



and make sure issues actually get fixed Manage our Truemed’s VDP Program Review AWS security basics - AWS WAF, S3 exposure, secrets, and logging What we’re looking for 4-7 years of hands-on experience in application or product security, in a consumer facing product company Robust understanding of web, mobile (android / iOS) and API security fundamentals Practical experience with DevSecOps tools and CI/CD pipelines Ability to work closely with engineering teams and explain security clearly Comfortable operating in a fast-moving product environment Nice to Have Experience with AWS-native services Prior work in consumer-scale or data-sensitive platforms Why you’ll enjoy working here You’ll have ownership and visibility, secure healthcare data. Security feedback is taken seriously and acted on You’ll help shape how product security works as the company grows

📌 Senior Product Security Engineer (Karnataka)
🏢 Truemeds
📍 Karnataka