Job Summary

An Amazing Career Opportunity for Senior Lead Product Security Engineer

Location: Chennai, India (Hybrid)

The Product Vulnerability Management Lead operates the day-to-day product vulnerability management program across a diverse product portfolio. Reporting to the Senior Product Vulnerability Manager, this role turns enterprise standards into consistent execution by product teams, ensuring vulnerabilities are triaged, prioritized, remediated, disclosed, and reported in an auditable manner.

Roles & Responsibilities

- Run vulnerability intake, triage, prioritization, remediation tracking, escalation, and closure processes across assigned product areas.
- Collaborate closely with Information Security, Development, Product Security, Legal, Privacy, and Compliance teams to coordinate vulnerability response activities.
- Assess, triage, prioritize, and coordinate remediation of vulnerabilities identified through SAST, SCA, secret scanning, penetration testing, security assessments, and external researchers.
- Track remediation commitments, validate progress with development teams, monitor SLA compliance, and escalate overdue or at-risk vulnerabilities.
- Lead emergency response or fire-fighting calls for urgent and critical vulnerabilities, bringing together the required stakeholders to define containment, remediation, validation, communication, and closure actions.
- Manage coordinated vulnerability disclosure activities, including external intake, researcher communications, vulnerability validation coordination, and disclosure timelines.
- Maintain vulnerability-management playbooks, operating procedures, exception workflows, risk-acceptance records, and evidence required for audits or customer inquiries.
- Support SBOM-driven response activities for third-party and open-source component vulnerabilities.
- Develop practical guidance and training that enable product teams to independently execute their vulnerability-management responsibilities.




- Produce clear operational and executive reporting on risk posture, remediation performance, disclosure activity, and program improvements.
- Identify gaps in adoption or process effectiveness and recommend scalable improvements.

Preferred Qualifications

- Familiarity with SBOMs, software supply-chain vulnerabilities, and open-source component governance.
- Experience in a large, multi-product or regulated environment.
- Relevant certifications such as CISSP, CSSLP, GIAC, or comparable credentials.

Experience and/or Education Qualification

- 10-12 years of experience in product security, application security, PSIRT, vulnerability management, or a related security discipline.
- Demonstrated experience managing the end-to-end vulnerability lifecycle in a software or connected-product environment.
- Experience with application security capabilities and vulnerability sources, including SAST, SCA, secret scanning, penetration testing, and secure handling of credentials and secrets in development and CI/CD environments.
- Experience coordinating or participating in penetration testing, including reviewing findings, validating impact, and driving remediation.
- Strong understanding of vulnerability severity, CVSS, remediation prioritization, common application-security vulnerabilities, and secure software development practices.
- Experience coordinating response for urgent or critical security vulnerabilities under tight timelines.
- Experience with coordinated vulnerability disclosure or PSIRT operations.
- Ability to work effectively with distributed engineering teams and influence action without direct authority.
- Robust written and verbal communication skills, including the ability to communicate technical risk clearly to non-technical stakeholders.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Sr Lead Product Security Engineer (Chennai)
🏢 Assa Abloy Entrance Systems
📍 Chennai