About the role

RIB Software India seeks a Product Security Manager to lead operational security for its software portfolio. The role owns the secure development lifecycle, drives threat modeling, risk assessments, and supply‑chain security, and ensures compliance with industry frameworks. The manager collaborates with product owners, developers, and security architects to embed security into every stage of product development, from design to decommissioning. Candidates bring 5+ years of product or application security experience, deep knowledge of SDL processes, and proficiency with SAST, DAST, and SCA tools. Strong communication, project‑management, and cross‑functional leadership skills are essential. The position offers a competitive salary, benefits, and growth opportunities within a global engineering and construction software company.

What you’ll do

Execute SDL requirements across product lifecycle
Drive threat modeling, security reviews, risk assessments
Track and manage product security issues through resolution
Manage supply chain security risks for external components
Collect and maintain compliance evidence
Coordinate security activities with development teams
Identify and refine security requirements across lifecycle
Serve as primary contact for customer security discussions
Support security training and assessment initiatives
Mentor Product Security Engineers
Contribute to security architecture and roadmap

What you’ll bring

5+ years product or application security experience
Strong SDL and security compliance knowledge
Proficient with SAST, DAST, SCA tools
Familiar with C#, Typescript, Java, JavaScript, Dart, C++, Python, Delphi
Experience in vulnerability management and risk assessment
Excellent communication and project management skills
Bachelor's in CS, Cybersecurity, or related field

Nice to have

CSSLP or similar secure development certification
Familiarity with cloud security best practices (Azure)
Experience with SOC 2, ISO 27001 frameworks
Experience with product or cloud security architecture
Background in SaaS or enterprise software environments

Skills

SDL implementation across product lifecycleThreat modeling, security reviews, risk assessmentsSupply chain security risk managementCompliance evidence collection and maintenanceSecurity architecture and roadmap contributionVulnerability management and risk assessmentStrong communication with technical and business stakeholdersProject management of cross-functional teams

Benefits

Competitive salary and benefits package
Opportunities for professional growth and development

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field