Senior Application Security / Product Security Engineer Job at Galaxy Office Automation Pvt. Ltd. (Mumbai)

Senior Application Security Engineer

This role involves embedding security into software delivery pipelines, designin...

Location

India , Bangalore

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

5–8+ years of experience in Application Security, Product Security, or Secure Software Development
hands-on experience securing software delivery pipelines (CI/CD) and source code repositories (GitHub, GitLab, Jenkins)
knowledge of supply chain security frameworks and controls (e.g., SLSA, NIST SSDF)
familiarity with secrets management, artifact signing (Sigstore, Cosign), and build integrity practices
hands-on experience with WAF tuning, API security controls, and vulnerability remediation
proficiency with one or more programming languages (Python, Java, Go, JavaScript/Node.js)
experience with SAST, DAST, SCA, and container image scanning tools
cloud security experience with AWS, Azure, or GCP
deep understanding of OWASP Top 10 (Web + API), CWE, and secure coding practices

Job Responsibility

secure SDLC & DevSecOps integration
design and implement security controls for build and release pipelines (GitHub Actions, Jenkins, GitLab, Azure DevOps)
ensure code integrity via signing, artifact scanning, and build provenance
automate SAST, DAST, SCA, and container image scanning as part of the software delivery pipeline
identify and remediate misconfigurations in pipeline environments and access control
design, implement, and monitor WAF rules and API protections
perform API risk assessments
champion secure design patterns
conduct secure code reviews and support automation of testing pipelines
triage, prioritize, and track security issues identified in code, pipelines, and deployed environments

What we offer

comprehensive suite of benefits that supports physical, financial and emotional wellbeing
programs catered to helping you reach career goals
inclusive work environment

Fulltime

Senior AI Security Engineer

Senior AI Security Engineer role in Citi's Application, Platform and Engineering...

Location

United Kingdom , London

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Production system builder with security focus - proven track record of architecting and building secure, large-scale production applications and business-facing platforms from the ground up
Ethical hacking and penetration testing expertise - hands-on experience finding and exploiting vulnerabilities, conducting red team exercises
State-of-the-art security engineering with Go, Python, JavaScript
HashiCorp Vault mastery - deep experience writing custom plugins, creating secrets engines, implementing dynamic credentials
Enterprise authentication & authorization - designing and implementing OAuth, JWT, RBAC, and complex identity systems
API security and threat modelling - securing REST/GraphQL APIs, conducting threat assessments
AI/ML security and vulnerability research - understanding of LLM vulnerabilities, model security, prompt injection attacks
Security automation and tooling – automating manual security processes
Cloud-native security - securing containerized applications in Kubernetes, service mesh security
Incident response and forensics - experience investigating, analyzing, and responding to security incidents

Job Responsibility

Build secure AI products from 0-1 - Engineer production-grade, business-facing AI platforms with security built-in from day one
Conduct ethical hacking and red team activities - penetration testing, vulnerability research, and attack simulation
Design and build security tools and frameworks - Create automated security solutions that scale across fast-paced development cycles
Secure novel AI attack surfaces - Identify and mitigate LLM-specific vulnerabilities, prompt injection attacks, and AI model security risks
Lead 'shift left' security - Embed security practices throughout rapid development lifecycle while maintaining velocity
Mentor security practices - Guide other engineers on secure coding, vulnerability remediation, and security-first thinking

What we offer

27 days annual leave (plus bank holidays)
Discretional annual performance related bonus
Private Medical Care & Life Insurance
Employee Assistance Program
Pension Plan
Paid Parental Leave
Special discounts for employees, family, and friends
Hybrid working model (up to 2 days working at home per week)
Competitive base salary (annually reviewed)

Fulltime

Senior Security Engineer

As a Senior Security Engineer, you will play a crucial role in safeguarding Dash...

Location

France , Paris

Salary:

Not provided

Dashlane

Expiration Date

Until further notice

Requirements

Familiarity with application security best practices, including threat modeling
Experience operating within an SDLC program
An understanding of CI/CD pipelines and their security implications
Familiarity in Identity and Access Management (IAM) frameworks and protocols (Passkeys, SAML, OAuth, SCIM, etc)
Interest in enabling secure use of AI tools to drive efficiency, creativity, and impact internally
Communication & Collaboration: You engage and listen empathetically to others, adjusting your communication style to fit the audience and message.
Mentoring: You enjoy using your knowledge and experience to support and uplevel those around you.
Motivated Learner: You learn new technologies and processes quickly, and understand where to look for knowledge when you need it.
Adaptability: You are a jack or jane of all trades - you’re comfortable digging into non-technical parts of the business to provide security support and guidance.

Job Responsibility

Help drive the continuous improvement of Dashlane’s security program across the product and company
Assist with architecture design reviews, threat modeling, and technical security assessments of Dashlane’s product (application and infrastructure) to identify security risks and provide mitigation guidance
Ensure security best practices are integrated throughout the software development lifecycle (SDLC)
Build upon and scale Vulnerability Management to ensure the team can track, analyze, and manage vulnerabilities and their remediation
Perform risk assessments of Dashlane’s internal systems, environments, assets, and data, and implement security best practices accordingly
Participate in Compliance and Incident Response activities

What we offer

Flex Benefits - monthly amount to be allocated to a pool of benefits of your choice.
Health insurance covered by Dashlane.
Extended time off and well-being days - add 5 days to you vacation quota, plus your birthday day off, and 4 extra days (one per quarter) to acknowledge the importance of your wellbeing.
Equal Parental leave - regardless of gender, up to 20 weeks fully paid leave to take care of their new baby, within the first year of birth or adoption.
Mentorship program - select your mentor from our internal pool and continue your learning path!
Flexible working hours - depending on the role, determine a schedule that fits your need, in alignment with your manager.
Donation matching program - give back to the community and support actions that lead to positive social impact under the historically marginalized communities. Every donation will be matched by Dashlane.
Mental health services through Spring Health for you and for you and family members.
Team buildings & seasonal social events.
Weekly lunch in the office and monthly happy hour and much more.

Fulltime

Senior Frontend Engineer (Application Security)

At Easygo, our DevSecOps team is at the heart of our engineering, security and o...

Location

Australia , Melbourne

Salary:

Not provided

Easygo Gaming

Expiration Date

Until further notice

Requirements

Bachelor's/Master's degree in Computer Science or equivalent practical experience
7+ years of hands-on experience in software engineering, with a primary focus on security engineering
Strong understanding of code architecture and design principles
Excellent problem-solving skills and the ability to thrive in a fast-paced, dynamic environment
Strong communication skills for effective collaboration with teams and stakeholders
Analytical mindset to address complex technical challenges and devise innovative solutions
Positive attitude and eagerness to learn new technologies to grow as a security engineer

Job Responsibility

Lead by example, and drive the adoption of secure software development lifecycle (SSDLC) practices. This includes performing threat modelling, providing secure coding guidance to development teams, and embedding security requirements early in the design phase
Own, improve, execute and manage various security tests, including SAST, DAST, and SCA, to identify vulnerabilities. Analyse test results and prioritise findings. Fix what you find, and work with developers to ensure timely remediation
Implement and maintain automated security controls within the CI/CD pipeline. This involves integrating security tools to enable continuous security testing and monitoring, making security an integral part of the DevSecOps process
Deploy and configure Web Application Firewalls (WAFs) and Runtime Application Self-Protection (RASP) solutions to protect from real-time attacks. Respond to urgent application security incidents as needed
Take ownership of the platform vulnerability management program. This involves tracking, prioritising, and remediation of security flaws found in applications, ensuring all vulnerabilities are addressed and verified
Actively engage in hands-on coding, testing, debugging, and troubleshooting to ensure code quality, scalability, and maintainability
Write efficient, scalable, and maintainable code, adhering to coding standards and best practices
Innovate within the team by pushing for improvements and driving constructive changes to enhance team performance and efficiency
Analyse complex problems and provide effective solutions, contributing to team goals and initiatives
Lead and independently complete medium-sized projects or initiatives from start to finish

What we offer

Access to over 9,000 courses across our Learning and Development Platform
EAP access for you and your family
Be rewarded with lucrative annual bonuses
Give back with a paid volunteer day
Fuel your day with daily breakfast and open pantries brimming with unlimited snacks and refreshments, all on the house
Break up the week with on site remedial massage Wednesdays
In house full-time barista’s providing you your daily coffee needs
Weekly team lunches and happy hour in the office from 4pm on Fridays
Enjoy a bustling office with the option for up to 2 days work from home per week
Fun office environment with pool tables, table tennis and all your favourite gaming consoles

Fulltime

Senior Software Engineer, Product Engineering

Everlaw is looking for a Senior Software Engineer with experience building and s...

Location

United States , Oakland

Salary:

164000.00 - 239000.00 USD / Year

Everlaw

Expiration Date

Until further notice

Requirements

BS or MS in Computer Science, or equivalent coursework
Experience and proficiency in coding in a language such as C, C++, C#, Java, Python, Javascript, Go or Rust
Good knowledge of algorithms and fundamental computer science concepts, relational databases, API design, and building user interfaces
At least 5 years of experience building distributed systems in the cloud with service based architecture, using frontend frameworks to create rich, deep, web applications, and experience with the best practices to test, maintain, and launch cloud based software
At least 1 year of experience leading or coordinating multi-developer efforts, including planning and technical breakdown

Job Responsibility

Build customer-facing features that represent the core of our product, including document and image/multi-modal processing, collaborative review tools, organization, translation tools, search, review, and more
Use AI technologies to find the evidence rapidly such as document classification, predictive coding, transfer learning and LLMs
Collaborate with one or more of the Product, Design, Engineering Operations, Security Engineering, and DevOps teams to build out and implement new features that are used in our production environments
Help with scaling our system to larger datasets with hundreds of millions of documents
Provide Technical Mentorship to other engineers by both sharing your technical knowledge and becoming an expert in an area of our code base
Be a Code Reviewer by reviewing code developed by others using your knowledge of programming languages, design patterns, and best practices
Fix defects in our product by triaging product or system issues and writing code to debug, track and resolve these issues
Provide on-call support for the product by answering questions from customers, triaging defects and exceptions, and carrying the pager
Contribute to documentation for internal engineering consumption or for external the Everlaw platform
Do technical interviews to help us recruit engineers and grow the team

What we offer

Equity program
401(k) retirement plan with company matching
Health, dental, and vision
Flexible Spending Accounts for health and dependent care expenses
Paid parental leave and approximately 10 days (80 hours) per year of sick leave
Seventeen paid vacation days plus 11 federal holidays
Membership to Modern Health to help employees prioritize mental health and wellness
Annual allocation for Learning & Development opportunities and applicable professional membership dues
Company-sponsored life and disability insurance
Work in Downtown Oakland, just steps from the BART line and dozens of restaurants

Fulltime

Senior Product Security Engineer

Ready to make an impact on the security of products from the ground up? Join our...

Location

United States , Austin

Salary:

Not provided

Take-Two Interactive Software, Inc.

Expiration Date

Until further notice

Requirements

Bachelor's degree in Computer Science, Information Technology, or a similar field, or equivalent experience
At least 5 years of demonstrated experience in application security, ideally within the gaming or technology sectors
Validated expertise in pentesting, security architecture, risk management, and securing CI/CD pipelines to ensure seamless and secure software delivery
Extensive knowledge of common and complex security vulnerabilities, along with effective mitigation techniques
Ability to translate design documents into security-focused guidelines and requirements for product development
Adapt quickly to new technologies, languages, and solve challenges outside your expertise
Travel: No routine travel required
occasional travel as needed.

Job Responsibility

Develop threat models for a variety of applications and games to prioritize scope and use cases for security testing
Execute hands-on penetration tests and red team exercises to identify vulnerabilities in applications, infrastructure, and services
Conduct manual and automated secure code reviews in languages such as C#, Java, Python, and JavaScript, providing clear, actionable guidance to developers on vulnerability remediation
Triage, validate, and manage vulnerability reports from our bug bounty program, working with external researchers and internal teams on resolution
Develop and implement security automation tools to improve the efficiency and effectiveness of security processes
Provide security architecture and design guidance to development teams, ensuring secure coding practices are followed
Partner with teams to define and execute security strategy, driving security priorities across the organization
Stay ahead of emerging security threats, seeking and advocating for new technologies to address complex risks.

What we offer

Medical (HSA & FSA), dental, vision, 401(k) with company match, employee stock purchase plan, commuter benefits, in-house wellness program, broad learning & development opportunities, a charitable giving platform with company match
Fitness allowance, employee discount programs, discounted games & events and stocked pantries.

Fulltime

Senior Product Security Engineer

Join our Product Security team, where you'll partner with development and game t...

Location

United States , Las Vegas

Salary:

Not provided

Take-Two Interactive Software, Inc.

Expiration Date

Until further notice

Requirements

Bachelor's degree in Computer Science, Information Technology, or a similar field, or equivalent experience
At least 5 years of demonstrated experience in application security, ideally within the gaming or technology sectors
Validated expertise in pentesting, security architecture, risk management, and securing CI/CD pipelines
Extensive knowledge of common and complex security vulnerabilities, along with effective mitigation techniques
Ability to translate design documents into security-focused guidelines and requirements for product development
Adapt quickly to new technologies, languages, and solve challenges outside your expertise

Job Responsibility

Develop threat models for a variety of applications and games to prioritize scope and use cases for security testing
Execute hands-on penetration tests and red team exercises to identify vulnerabilities in applications, infrastructure, and services
Conduct manual and automated secure code reviews in languages such as C#, Java, Python, and JavaScript, providing clear, actionable guidance to developers on vulnerability remediation
Triage, validate, and manage vulnerability reports from our bug bounty program, working with external researchers and internal teams on resolution
Develop and implement security automation tools to improve the efficiency and effectiveness of security processes
Provide security architecture and design guidance to development teams, ensuring secure coding practices are followed
Partner with teams to define and execute security strategy, driving security priorities across the organization
Stay ahead of emerging security threats, seeking and advocating for new technologies to address complex risks

What we offer

Medical (HSA & FSA)
dental
vision
401(k) with company match
employee stock purchase plan
commuter benefits
in-house wellness program
broad learning & development opportunities
a charitable giving platform with company match
Fitness allowance

Fulltime

Senior Security Engineer

The primary focus of this role is web application security. The security team wo...

Location

Salary:

110000.00 - 190000.00 USD / Year

Aha!

Expiration Date

Until further notice

Requirements

Four+ years of experience working in application security
Active collaborator with engineering and product teams
Experience with security reviews or threat modeling for a full-stack web application
Experience with security tools such as CodeQL or Burp Suite

Job Responsibility

Identifying application security threats and mitigations early
Improving and maintaining security code scanning tools
Contributing to application security scanning or testing
Developing and sharing secure patterns internally for ongoing education

What we offer

Profit sharing
Medical, dental, and vision plans (for many teammates, we cover 100% of the premiums)
Up to 200 hours of paid time off a year to spend however you want
30 to 90 days of paid parental leave and five to 10 days of paid care and bereavement leave
Up to $1,000 annually for third-party education, along with paid time off to immerse yourself in learning
Volunteer opportunities throughout the year

Fulltime

Select Country

Senior Application Security / Product Security Engineer

Job Description

Job Responsibility

Requirements

Nice to have

Looking for more opportunities?