Description

You will own the product security lifecycle, ensuring secure architecture and compliant delivery for technology projects.

This role is on-site.

Responsibilities

• Implement and enforce Secure Software Development Lifecycle (SSDLC) practices to proactively identify and mitigate security risks.
• Conduct Vulnerability Assessment and Penetration Testing (VAPT) for applications, APIs, and desktop systems aligned with OWASP Top 10.
• Lead threat modeling using STRIDE methodology and conduct security architecture reviews adhering to CIA and AAA principles.
• Develop and maintain CI/CD security pipelines using Jenkins to integrate SAST, DAST, and SCA tools into development workflows.
• Perform AI/LLM security testing based on OWASP Top 10 for LLMs to ensure comprehensive coverage.

Required Skills

• 5+ years of experience in Product Security or Application Security.
• Deep understanding of OWASP Top 10 for Web, API, and LLM Security.
• Proficiency in VAPT, SAST, DAST, and SCA tools and methodologies.
• Hands-on experience with DevSecOps practices and Jenkins-based pipeline integration.
• Programming skills in Java and Python for tooling and script development.
• Experience supporting internal and external audits (ISO 27001, SOC 2, FedRAMP).

Preferred Skills

• Knowledge of containerization and orchestration (Docker, Kubernetes).
• Familiarity with Azure infrastructure, including compute, networking, and security services.
• Industry-recognized certifications such as OSCP, CEH, or ECSA.

Key Skills

Education

Any Graduate