Senior product security engineer

Senior Security Engineer - Product Security

Location: Bangalore

Experience: 4-7+ years

Must Have: Experience in Consumer facing Product companies

What this role is about

We're looking for a hands-on Product Security Engineer who enjoys breaking things (ethically), understanding how systems actually work, and fixing security issues before they become incidents.

You'll work closely with engineering teams to secure our web, mobile, and API platforms and help embed security naturally into how products are built.

This is not a policy-only or tool-only role. You'll be close to the code, architecture, and developers.

What you'll do (day to day)

Review applications and APIs for real-world security issues, not just OWASP checklists Threat model new features and architecture changes before they go live Test web and mobile applications through hands-on black-box testing Help developers fix vulnerabilities and explain why they matter Set up and maintain security checks in CI/CD pipelines (SAST, SCA, Ia C scanning) Coordinate penetration tests, review findings, and make sure issues actually get fixed Manage our Truemed's VDP Program Review AWS security basics - AWS WAF, S3 exposure, secrets, and logging

What we're looking for

4-7+ years of hands-on experience in application or product security, in a consumer facing product company Strong understanding of web, mobile (android / i OS) and API security fundamentals Practical experience with Dev Sec Ops tools and CI/CD pipelines Ability to work closely with engineering teams and explain security clearly Comfortable operating in a fast-moving product environment

Nice to Have

Experience with AWS-native services Prior work in consumer-scale or data-sensitive platforms

Why you'll enjoy working here

You'll have ownership and visibility, secure healthcare data. Security feedback is taken seriously and acted on You'll help shape how product security works as the company grows