Senior Security Engineer - Product SecurityLocation: BangaloreExperience: 4-7+ yearsMust Have: Experience in Consumer facing Product companiesWhat this role is aboutWe’re looking for a hands-on Product Security Engineer who enjoys breaking things (ethically), understanding how systems actually work, and fixing security issues before they become incidents.You’ll work closely with engineering teams to secure our web, mobile, and API platforms and help embed security naturally into how products are built.This is not a policy-only or tool-only role. You’ll be close to the code, architecture, and developers.What you’ll do (day to day)Review applications and APIs for real-world security issues, not just OWASP checklistsThreat model new features and architecture changes before they go liveTest web and mobile applications through hands-on black-box testingHelp developers fix vulnerabilities and explain why they matterSet up and maintain security checks in CI/CD pipelines (SAST, SCA, IaC scanning)Coordinate penetration tests, review findings,



and make sure issues actually get fixedManage our Truemed’s VDP ProgramReview AWS security basics - AWS WAF, S3 exposure, secrets, and loggingWhat we’re looking for4-7+ years of hands-on experience in application or product security, in a consumer facing product companyStrong understanding of web, mobile (android / iOS) and API security fundamentalsPractical experience with DevSecOps tools and CI/CD pipelinesAbility to work closely with engineering teams and explain security clearlyComfortable operating in a rapid-moving product environmentNice to HaveExperience with AWS-native servicesPrior work in consumer-scale or data-sensitive platformsWhy you’ll enjoy working hereYou’ll have ownership and visibility, secure healthcare data.Security feedback is taken seriously and acted onYou’ll help shape how product security works as the company grows

📌 Senior Product Security Engineer (Bengaluru)
🏢 Truemeds
📍 Bengaluru