Staff Product Security Engineer

Summary of Position

Key member of the Security team, this role focuses on securing applications, platform and AI systems. The role includes hands-on security testing, secure development practices, and security architecture and ownership of security outcomes.

Essential Duties and Responsibilities
Perform VAPT across web, mobile, and API’s.
Identify, assess, and help remediate vulnerabilities across the SDLC
Partner with engineering teams to embed secure-by-design and secure-by-default practices
Support responsible disclosure and/or bug bounty programs
Contribute to vulnerability management, risk tracking, and remediation validation
Use automation and tooling to improve the efficiency and scale of security controls
Integrate security into CI/CD pipelines (SAST, SCA, secrets scanning, container/image scanning)
Evaluate, onboard, and operate security tooling, including emerging AI-powered solutions
Partner with product and engineering teams to design mitigations and guardrails
Provide security architecture guidance for recent platforms and features
Execute or guide Breach & Attack Simulations (BAS) to validate detection and response




Build automation and AI assisted workflows that measurably improve security outcomes

Qualifications Expected for Position
Solid experience in Application Security and vulnerability assessment
Hands-on expertise with web, mobile and API security testing, including OWASP Top 10
Proven experience supporting vulnerability remediation with engineering teams
Solid understanding of:
Secure SDLC
Security-by-design principles
Secure coding and design patterns
Hands-on experience with SAST, SCA, secrets management, and container scanning tools
Familiarity with common security tools such as Burp Suite, Wiz, Nuclei, or equivalent
Familiarity with deploying and managing RASP tools or eBPF kernel controls
Practical experience using LLMs in security workflows, including:
AI-assisted testing or analysis
Coding agents
Lightweight automations using APIs (OpenAI, Anthropic, Cursor, etc.)
Exposure to AI/ML security concepts
Experience with BAS tools or attack simulation frameworks
Scripting experience in Python, Go, or similar languages
Familiarity with Infrastructure as Code (Terraform or equivalent)

📌 Staff Product Security Engineer Hyderabad
🏢 Teladoc Health
📍 Hyderabad