Product Security Engineer in India at Jobgether

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Product Security Engineer based in India.

This role offers the opportunity to strengthen product security programs by combining software engineering expertise with cybersecurity practices.
You will design automation, build data-driven security workflows, and help embed security-by-design principles across the product development lifecycle.
Working closely with engineering, product, and security teams, you will improve visibility, governance, and operational effectiveness at scale.
Your work will directly contribute to building secure software, improving compliance readiness, and advancing automated security capabilities.
This is a developer-focused security role for someone who enjoys solving complex technical challenges through code, data, and automation.
You will join a collaborative environment where innovation, continuous improvement, and AI-driven security practices are encouraged.

As a Product Security Engineer, you will help build and evolve security governance capabilities by developing scalable processes, automation, and reporting solutions that support secure product development.

• Establish and maintain product security governance processes, ensuring traceability, accountability, and audit readiness.
• Define, monitor, and report compliance against product security policies, standards, and procedures.
• Develop and maintain security control repositories, evidence management processes, and audit documentation.
• Support internal and external audits, regulatory reviews, and security compliance initiatives.
• Embed security-by-design principles throughout the software development lifecycle by partnering with engineering and product teams.
• Facilitate security requirements definition, architecture reviews, threat assessments, and design evaluations.
• Drive consistent execution of security checkpoints and governance practices across development programs.
• Build automated dashboards, KPIs, and security metrics using tools such as Power BI, Tableau, Grafana, or similar platforms.
• Develop data pipelines that integrate security and product data from systems such as GitLab, Jira, and vulnerability management tools through APIs.
• Automate security workflows using Python, PowerShell, APIs, and other automation technologies.
• Manage product security data, artifacts, and documentation to ensure accuracy, accessibility, and regulatory alignment.
• Develop and deliver security training programs that promote secure coding practices and a security-first culture.
• Measure security program adoption and communicate insights to technical teams and leadership.

The ideal candidate is a software-focused security professional with strong development experience and a passion for automation, governance, and secure engineering practices.

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5+ years of experience in application security, product security, secure SDLC, DevSecOps, cybersecurity governance, or related areas.
• Strong software development background with proficiency in Python and/or PowerShell scripting.
• Hands-on experience developing and consuming REST APIs to integrate security tools and automate workflows.
• Experience building dashboards, KPI reports, and security metrics using Power BI, Tableau, Grafana, or similar technologies.
• Understanding of data pipeline concepts, including API integrations, database storage, and reporting workflows.
• Knowledge of security governance frameworks such as NIST SSDF, OWASP SAMM, ISO 27001, or IEC 62443.
• Strong understanding of secure software development lifecycle practices, threat modeling, and security-by-design principles.
• Experience automating security processes through APIs, scripting, or workflow automation platforms.
• Excellent communication and stakeholder management skills, with the ability to present security insights to engineering teams and leadership.
• Experience working in regulated industries such as healthcare, medical devices, or financial services is preferred.
• Familiarity with tools such as GRC platforms, ServiceNow, Jira, Azure DevOps, or GitLab is an asset.
• Security certifications such as CISSP, CSSLP, CISM, GSEC, or CCSP are preferred but not required.
• Exposure to AI and machine learning applications in security automation is a strong advantage.

• Competitive compensation package.
• Provident fund and medical insurance coverage.
• Remote work flexibility with modern collaboration tools.
• Engaging employee programs and local team events.
• Opportunity to work on meaningful security initiatives that support critical technology solutions.
• Collaborative environment focused on innovation, learning, and professional growth.
• Opportunity to contribute to AI-driven security automation and next-generation cybersecurity practices.