Job Description :

Role & Responsibilities :

- Provide cybersecurity expertise and guidance across products, platforms, cloud services, and software engineering initiatives.

- Drive Security-by-Design and Secure SDLC practices throughout the product lifecycle.

- Conduct threat modeling, security assessments, and security architecture/design reviews.

- Define and implement Application/Product Security standards and controls.

- Integrate security practices into DevSecOps and CI/CD pipelines using SAST, DAST and SCA.

- Assess and strengthen AWS/Azure cloud security and cloud-native environments.

- Guide container and Kubernetes security for modern application platforms.

- Review and secure APIs, microservices, authentication and authorization mechanisms.

- Collaborate with Architects, Engineering, DevOps, QA, Product Management and Cybersecurity teams to identify and mitigate security risks.

- Provide technical guidance on vulnerabilities, secure coding, remediation and security best practices.

- Support penetration testing, vulnerability assessments and security validation activities.

- Establish cybersecurity standards, controls and governance aligned with organizational and industry requirements.

Preferred Candidate Profile:

- 6 - 10 years of experience in Cybersecurity, Product Security, Application Security or Security Engineering.

- Strong hands-on experience in Application/Product Security and Secure SDLC.

- Proven experience with Threat Modeling, preferably STRIDE/PASTA.

- Strong understanding of Security Architecture and Security-by-Design.

- Hands-on experience with AWS and/or Azure Cloud Security.

- Strong knowledge of DevSecOps and CI/CD security integration.

- Experience with SAST, DAST and SCA tools and security gates.

- Good understanding of Docker, Kubernetes and Container Security.

- Strong knowledge of API and Microservices Security.

- Good understanding of OWASP Top 10 and common application security vulnerabilities.

- Strong analytical, problem-solving and communication skills with the ability to work independently as a technical SME.

- Security certifications such as CISSP, OSCP, CEH, CSSLP are an advantage.