Job Description

Accountabilities:

As a Product Security Engineer, you will help build and evolve security governance capabilities by developing scalable processes, automation, and reporting solutions that support secure product development.

• Establish and maintain product security governance processes, ensuring traceability, accountability, and audit readiness.
• Define, monitor, and report compliance against product security policies, standards, and procedures.
• Develop and maintain security control repositories, evidence management processes, and audit documentation.
• Support internal and external audits, regulatory reviews, and security compliance initiatives.
• Embed security-by-design principles throughout the software development lifecycle by partnering with engineering and product teams.
• Facilitate security requirements definition, architecture reviews, threat assessments, and design evaluations.
• Drive consistent execution of security checkpoints and governance practices across development programs.
• Build automated dashboards, KPIs, and security metrics using tools such as Power BI, Tableau, Grafana, or similar platforms.
• Develop data pipelines that integrate security and product data from systems such as GitLab, Jira, and vulnerability management tools through APIs.
• Automate security workflows using Python, PowerShell, APIs, and other automation technologies.
• Manage product security data, artifacts, and documentation to ensure accuracy, accessibility, and regulatory alignment.
• Develop and deliver security training programs that promote secure coding practices and a security-first culture.
• Measure security program adoption and communicate insights to technical teams and leadership.

Requirements:

The ideal candidate is a software-focused security professional with strong development experience and a passion for automation, governance, and secure engineering practices.

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5+ years of experience in application security, product security, secure SDLC, DevSecOps, cybersecurity governance, or related areas.
• Strong software development background with proficiency in Python and/or PowerShell scripting.
• Hands-on experience developing and consuming REST APIs to integrate security tools and automate workflows.
• Experience building dashboards, KPI reports, and security metrics using Power BI, Tableau, Grafana, or similar technologies.
• Understanding of data pipeline concepts, including API integrations, database storage, and reporting workflows.
• Knowledge of security governance frameworks such as NIST SSDF, OWASP SAMM, ISO 27001, or IEC 62443.
• Strong understanding of secure software development lifecycle practices, threat modeling, and security-by-design principles.
• Experience automating security processes through APIs, scripting, or workflow automation platforms.
• Excellent communication and stakeholder management skills, with the ability to present security insights to engineering teams and leadership.
• Experience working in regulated industries such as healthcare, medical devices, or financial services is preferred.
• Familiarity with tools such as GRC platforms, ServiceNow, Jira, Azure DevOps, or GitLab is an asset.
• Security certifications such as CISSP, CSSLP, CISM, GSEC, or CCSP are preferred but not required.
• Exposure to AI and machine learning applications in security automation is a strong advantage.

Benefits:

• Competitive compensation package.
• Provident fund and medical insurance coverage.
• Remote work flexibility with modern collaboration tools.
• Engaging employee programs and local team events.
• Opportunity to work on meaningful security initiatives that support critical technology solutions.
• Collaborative environment focused on innovation, learning, and professional growth.
• Opportunity to contribute to AI-driven security automation and next-generation cybersecurity practices.