Job Description :

We are looking for a Senior Application / Product Security Engineer with 7+ years of relevant experience in application security, product security, secure software development, cloud security, and container/Kubernetes security.

The candidate should have strong hands-on experience in securing applications and products throughout the Software Development Life Cycle (SDLC) and should be comfortable working with engineering, DevOps, cloud, and product teams.

Mandatory Technical Skills :

Candidates must have hands-on experience in ALL of the following areas :

Application Security / Product Security / Secure SDLC :

- Strong experience integrating security throughout the Software Development Life Cycle.

- Experience identifying and mitigating application and product security vulnerabilities.

- Secure coding practices, security reviews, vulnerability management, and security testing.

Threat Modeling & Risk Assessment :

- Hands-on experience performing threat modeling for applications/products.

- Ability to identify security threats, attack vectors, vulnerabilities, and associated risks.

- Experience with security risk assessment and defining appropriate mitigation strategies.

Azure / AWS Cloud Security :

- Strong hands-on experience securing workloads deployed on Microsoft Azure and/or AWS.

- Knowledge of cloud security architecture, IAM, network security, data protection, security monitoring, and cloud security best practices.

- Experience identifying and mitigating cloud-specific security risks.

Container & Kubernetes Security :

- Hands-on experience securing Docker/containerized applications and Kubernetes environments.

- Knowledge of container image security, vulnerabilities, runtime security, Kubernetes RBAC, secrets management, network policies, and workload security.

- Experience implementing security controls in containerized environments.

Key Responsibilities :

- Drive application and product security initiatives across the complete SDLC.

- Conduct threat modeling and security risk assessments for applications and products.

- Work closely with development teams to identify and remediate security vulnerabilities.

- Define and implement secure development practices and security controls.

- Assess and improve security of applications deployed on AWS/Azure.

- Review cloud architectures and identify potential security risks.

- Implement and assess security controls for Docker and Kubernetes environments.

- Collaborate with DevOps, Cloud, Engineering, and Product teams to integrate security into CI/CD pipelines.

- Support vulnerability assessment, remediation, and security validation activities.

- Provide security guidance to engineering teams and help establish secure-by-design practices.

- Contribute to security standards, guidelines, and best practices across products and applications.

Mandatory Requirements :

- 7+ years of relevant cybersecurity/application security experience.

- Strong experience in Application Security / Product Security / Secure SDLC.

- Hands-on experience in Threat Modeling and Risk Assessment.

- Hands-on experience in Azure and/or AWS Cloud Security.

- Hands-on experience in Container and Kubernetes Security.

Preferred Experience :

- DevSecOps / CI/CD security

- SAST / DAST / SCA

- OWASP Top 10

- Vulnerability management

- Security architecture and design reviews

- IAM and secrets management

- Docker security

- Kubernetes security

- Cloud-native security

- Security automation and scripting

Candidate Profile :

The ideal candidate will be a hands-on security professional who can work across Application Security, Product Security, Cloud Security, and Container/Kubernetes Security, rather than someone with experience limited to SOC, network security, or compliance.

Relevant experience matters more than generic cybersecurity experience.