Senior Product Security Engineer

About the role

Global Product Security Engineering team at Xylem safeguards water‑focused digital products by conducting rigorous security assessments of cloud‑hosted applications and APIs. The Senior Product Security Engineer leads threat modeling, evaluates identity and access controls like OAuth2/OIDC, SAML, and JWT, and produces clear risk reports to guide engineering and product decisions. Works closely with cross‑functional teams in Bangalore, India, in a hybrid model (3 days onsite, 2 days remote).

What you’ll do

• Lead security assessments of cloud‑hosted applications and APIs
• Conduct threat modeling and architecture reviews early in design
• Assess modern identity and access control implementations
• Produce assessment reports for engineering and product leadership
• Work with teams to resolve identified security issues
• Contribute to security standards, methodologies, and tooling
• Support product security incident response (PSIRT) activities
• Stay current on application, API, and AI security developments

What you’ll bring

• Hands‑on product/application security assessments
• Deep knowledge of OWASP Top 10 and API security
• Experience with OAuth2/OIDC, SAML, JWT implementations
• Proficiency in scripting or proof‑of‑concept code development
• Understanding of cloud architectures, microservices, containers
• Strong written and verbal communication for technical reports
• Ability to collaborate with engineering and product teams
• Bachelor's degree in Computer Science, Engineering, or related field

Skills