Chuno
Back to jobs
QG
Hiring companyQuest Global

Verified today

Lead Product Security Engineer

Bengaluru, Karnataka, India Full-time On-site

About the role

Lead Product Security Engineer drives product security activities within the Secure Software Development Lifecycle (SSDLC) to build secure medical products. The role involves threat modeling, security architecture reviews, and vulnerability management while collaborating with cross-functional engineering teams. This full-time position is based in Bengaluru, Karnataka, India.

What you’ll do

  • Perform Threat Modeling using STRIDE, PASTA, MITRE ATT&CK and similar methodologies
  • Conduct Security Architecture Reviews and recommend Secure-by-Design solutions
  • Define and review Product Security requirements during software development
  • Perform security assessments using SAST, DAST and Software Composition Analysis (SCA) tools
  • Drive vulnerability triage, risk assessment, remediation tracking and security verification
  • Review SBOMs and monitor third-party software risks using industry-standard tools
  • Collaborate with architects and engineering teams to implement secure coding and security best practices
  • Provide technical guidance on cryptography, IAM, network security and secure communications

What you’ll bring

  • 8+ years of experience in Product Security, Application Security or Secure Software Development
  • Strong experience with Threat Modeling methodologies (STRIDE, PASTA, MITRE ATT&CK)
  • Experience with SAST, DAST and SCA tools
  • Strong understanding of Secure Design Principles and Secure Software Development Lifecycle
  • Experience in Vulnerability Management and Security Risk Assessment

Nice to have

  • Knowledge of Software Bill of Materials (SBOM) and Supply Chain Security
  • Strong understanding of Cryptography, Identity & Access Management and Network Security
  • Experience working with software architects and development teams
  • Excellent analytical and communication skills

Skills

Threat ModelingSAST DAST SCAVulnerability ManagementSecure ArchitectureDevSecOpsCryptographyIAMSBOM

Keep exploring

Similar opportunities.

See all similar roles
CZ

Carl Zeiss

Product Security Lead

Product Security Lead at Carl Zeiss India (Bangalore) responsible for designing and validating security controls for services, applications, and emerging technologies. Lead security assessments, penetration testing, and threat modeling across the secure development life‑cycle (SDLC). Deploy, migrate, and maintain product security solutions in alignment with company policies, working closely with project security engineers. Resolve infrastructure vulnerabilities and product security issues. Requi

Bangalore, IndiaOn-siteFull-time

Verified yesterday

S

Sprinklr

Lead Product Security Architect

Product Security team at Sprinklr defines and executes the cloud and product security strategy across AWS, Azure and GCP. The Lead Architect drives security roadmaps, establishes baselines, and leads threat modeling, policy‑as‑code and security‑as‑code initiatives while mentoring engineers. Gurgaon office, on-site work model, relocation assistance available.

Gurgaon, Haryana, IndiaOn-siteFull-time

Active listing

I

Ideagen

Product Security Lead

Cybersecurity team at Ideagen safeguards product portfolios by embedding secure‑by‑design principles across development. The Product Security Lead guides product teams, conducts threat modelling, oversees vulnerability remediation, and coordinates penetration testing while collaborating with Technology, Product, and third‑party vendors. Hyderabad, India, on‑site work model.

Hyderabad,India,IndiaOn-siteFull-time

Active listing