Responsibilities

Act as the primary product security contact for Engineering, Product, and Support teams and assess product architecture, technology stacks, APIs, integrations, and deployment models.

Perform vulnerability triage, reproduction, validation, risk assessment, prioritization, remediation tracking, reporting, and root cause analysis.

Lead vulnerability management across SAST, DAST, SCA, penetration tests, bug bounty programs, and customer-reported issues.

Establish remediation SLAs, track findings through closure, validate fixes, and drive corrective actions.

Promote Secure SDLC and secure coding practices across Java, Python, Node.js, .NET, and cloud-native applications.

Conduct code reviews, develop security standards, validate fixes, and guide engineering teams on sustainable remediation.

Integrate security controls and scanning tools into CI/CD pipelines, automate security validation, and support shift-left security practices.

Support security implementation across Kubernetes, Docker, containers, infrastructure as code, and cloud-native deployment pipelines.

Investigate and remediate product security incidents and collaborate with Engineering, Cloud Operations, Support, and Security teams during incident response.

Support SOC 2, ISO 27001, NIST, CIS, customer security assessments, audits, evidence collection, remediation tracking, and security documentation.





Serve as a product security subject matter expert, mentor teams, and deliver security awareness and secure coding training.

Requirements

- 8+ years of experience in Application Security, Product Security, Cybersecurity, DevSecOps, or Software Engineering.
- Strong knowledge of OWASP Top 10, CWE, CVSS, secure coding, vulnerability assessment, security triage, remediation, and risk analysis.
- Understanding of enterprise architectures, APIs, microservices, distributed systems, SaaS, OAuth, OIDC, SAML, and IAM.
- Hands-on experience with Black Duck, Black Duck SRM, AppScan, Qualys, SonarQube, Burp Suite, and dependency scanning tools.
- Familiarity with Kubernetes, Docker, CI/CD security, DevSecOps, AWS, Azure, container security, and cloud-native environments.
- Proven vulnerability remediation experience with strong analytical, troubleshooting, and cross-functional collaboration skills.
- Preferred certifications include CISSP, CSSLP, Security+, GIAC, CCSP, AWS Security, or Azure Security.

Advantages

Industry-leading benefits, support, and services focused on holistic health and wellbeing.

Flexible work arrangements may be available depending on the role and location.

Inclusive, equal-opportunity workplace with reasonable accommodations available during the recruitment process.

📌 Cyber Security/ Product Security Engineer (Pune)
🏢 Hitachi
📍 Pune