About the Role

We are seeking an experienced Senior Product Security Engineer to help build and scale security across a rapidly growing cloud-native technology platform.

This role sits within the engineering organization and works closely with software engineers, platform engineers, and SRE teams to embed security throughout the software development lifecycle. You will drive security initiatives across product development, cloud infrastructure, AI-powered systems, threat detection, and compliance automation.

This position is ideal for a hands-on security engineer who enjoys partnering with engineering teams, building automation, and improving security at scale.

What You'll Do

Application & Product Security

- Lead application security initiatives across the software development lifecycle.
- Conduct security architecture and design reviews.
- Perform threat modeling for recent products and features.
- Design and improve secure development practices.
- Integrate security controls into CI/CD pipelines.
- Partner with engineering teams to remediate security vulnerabilities.
- Define and maintain secure coding standards.

Penetration Testing & Offensive Security
- Perform penetration testing against web applications, APIs, and internal services.
- Identify vulnerabilities and validate remediation efforts.
- Develop testing methodologies and attack simulations.
- Coordinate and manage penetration testing engagements from planning through reporting.

Cloud & Platform Security
- Improve security posture across AWS-based infrastructure.
- Assess and remediate IAM,



network segmentation, and access-control issues.
- Secure containerized and Kubernetes-based workloads.
- Implement controls for secrets management and software supply-chain security.
- Drive security automation across infrastructure and deployment platforms.

Security Monitoring & Detection Engineering
- Design and improve automated detection and response capabilities.
- Manage and tune security monitoring solutions.
- Create and optimize detection rules, alerts, and response workflows.
- Investigate and respond to security incidents affecting applications and infrastructure.
- Develop protections against attacks such as SQL Injection, Cross-Site Scripting (XSS), and other web application threats.

AI Security
- Evaluate security risks associated with AI and LLM-powered products.
- Assess and mitigate prompt injection, jailbreak, and data leakage risks.
- Define secure practices for AI-assisted software development.
- Implement controls governing AI agents, permissions, and sensitive data access.

Security Compliance & Automation
- Build technical controls to support security and compliance requirements.
- Automate evidence collection and security reporting processes.




- Support customer security reviews and technical due diligence activities.
- Partner with auditors and stakeholders during security assessments and certification programs.

Required Qualifications

Secure Software Development

- Experience implementing security practices within modern software development environments.
- Strong knowledge of:
- Threat modeling
- Security design reviews
- Secure SDLC
- SAST
- DAST
- Dependency and supply-chain security scanning

Cloud Security
- Hands-on experience securing cloud environments, preferably AWS.
- Understanding of:
- IAM design and governance
- Network security architecture
- Kubernetes security
- RBAC and workload permissions
- CI/CD security controls
- Secret management solutions

Security Detection & Incident Response
- Experience operating or engineering security monitoring systems such as:
- SIEM
- WAF
- IDS/IPS
- Runtime application protection technologies
- Ability to investigate, respond to, and remediate security incidents.

Application Security Engineering
- Experience securing modern web applications and APIs.
- Strong understanding of common application security vulnerabilities and mitigation techniques.
- Hands-on experience with JavaScript/TypeScript and Node.js application security.

Communication Skills
- Ability to work effectively within globally distributed engineering teams.
- Professional English communication skills.

Location
- Currently based in Japan or willing to relocate

📌 Senior Product Security Engineer (India)
🏢 Computer Futures
📍 India