Software Product Security Engineer

3 - 5 years

10 - 15 Lacs

Posted:1 week ago| Platform: Naukri logo

Apply

Work Mode

Work from Office

Job Type

Full Time

Job Description

We are seeking a Software Product Security Engineer to ensure security across the lifecycle of our web-based product. This role focuses on embedding security practices into the design, development, implementation, and integration phases while addressing the unique challenges of delivering our product as Application as a Service (AaaS) and Software as a Service (SaaS).
As a key contributor, you will define and implement security measures for the product, including integrations such as Single Sign-On (SSO), Identity and Access Management (IAM), and other third-party systems. You will ensure secure configurations for protocols like SSL, manage web application security headers (e.g., CORS), and evaluate all security aspects of product deployments. If you have a passion for securing modern web applications in dynamic environments, this role is a perfect fit! "},"comp-m9fqtr2e":{"html":"
  • Security by Design: Work with product and engineering teams to design secure architectures for web-based applications and integrations.

  • Product Security Evaluation: Assess and implement security measures specific to AaaS and SaaS models, including encryption, data protection, and tenant isolation.

  • Single Sign-On and IAM: Integrate and secure authentication solutions like Single Sign-On (SSO), IAM frameworks, and third-party identity providers (e.g., Okta, Azure AD).

  • Web Application Security: Implement and manage security protocols such as SSL\/TLS, and enforce secure practices for web headers like CORS, Content-Security-Policy, and others.

  • Vulnerability Management: Identify, prioritize, and remediate security vulnerabilities in the product through manual and automated methods.

  • Threat Modeling: Conduct threat modeling and risk assessments for product components and integrations.

  • Security Best Practices: Develop secure coding standards and guide engineering teams in adhering to them.

  • Automation: Build and maintain automation scripts for testing security configurations in CI\/CD pipelines.

  • Monitoring and Incident Response: Collaborate with security operations to monitor and respond to security incidents related to the product.

  • Compliance and Documentation: Ensure the product complies with security standards such as SOC 2, ISO 27001, or PCI-DSS. Document security policies, practices, and configurations. "},"comp-m9frapza4":{"html":"Education:Bachelor s degree in Computer Science, Cybersecurity, Software Engineering, or a related field (or equivalent experience).Technical Skills:Strong understanding of security for AaaS and SaaS models, including multi-tenancy and data segregation.Experience with web application security protocols, including SSL\/TLS, OAuth, SAML, and OpenID Connect.Familiarity with IAM and SSO providers like Okta, Azure AD, or similar.Proficiency in securing web technologies, including handling CORS, CSRF, XSS, and SQL Injectionvulnerabilities.Hands-on experience with security tools (e.g., OWASP ZAP, Burp Suite) and DevSecOps integration into CI\/CD pipelines.Strong knowledge of secure coding practices and encryption standards.Proficiency in scripting or programming languages such as Python, JavaScript, or Java.Familiarity with cloud environments like AWS, Azure, or Google Cloud and their native security tools.Experience:3-5 years of experience in application security, software development, or product security engineering.Proven track record of securing web-based products in a SaaS or AaaS environment.Hands-on experience with securing product integrations, including APIs and third-party services.Soft Skills:Strong problem-solving and analytical thinking abilities.Excellent communication skills, with the ability to explain complex security concepts to non-technical stakeholders.Collaborative mindset and the ability to work effectively across diverse teams. "}}],"

Mock Interview

Practice Video Interview with JobPe AI

Start JavaScript Interview
cta

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.

Job Application AI Bot

Job Application AI Bot

Apply to 20+ Portals in one click

Download Now

Download the Mobile App

Instantly access job listings, apply easily, and track applications.

coding practice

Enhance Your Javascript Skills

Practice Javascript coding challenges to boost your skills

Start Practicing Javascript Now
Datamaze Solutions logo
Datamaze Solutions

IT Services and IT Consulting

Kolkata West Bengal

RecommendedJobs for You

warangal, hyderabad, nizamabad