Senior Security Engineer II
Blink Health2 months ago
India (city not specified)Senior
Responsibilities
- Define and drive application security strategy across web, API, mobile, and cloud-native applications.
- Lead security architecture reviews, threat modeling, and targeted penetration testing for high-impact initiatives.
- Build scalable security controls, secure engineering standards, reference architectures, and secure-by-default development practices.
- Automate SAST, DAST, software composition analysis, infrastructure-as-code scanning, secrets detection, container security, and CI/CD security.
- Develop API security standards covering authentication, authorization, service identity, secrets management, and runtime protections.
- Lead security reviews and secure design patterns for LLM applications, AI agents, MCP-based architectures, model integrations, and RAG systems.
- Assess AI security risks including prompt injection, insecure tool use, excessive agency, data leakage, model abuse, and supply-chain risks.
- Partner with engineering, platform, AI, and product teams to implement security services, guardrails, governance, monitoring, and secure deployment patterns.
- Define application security KPIs, executive reporting, vulnerability management processes, and security maturity improvements.
- Mentor application security engineers and security champions while influencing engineering roadmaps through architecture guidance.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
- 8–12+ years of experience in Application Security, Product Security, or Security Engineering.
- Experience securing large-scale cloud-native applications and designing secure software architecture.
- Expertise with OWASP Top 10, API Security Top 10, Mobile Top 10, and common software attack techniques.
- Experience with SAST, DAST, Software Composition Analysis, container security, Infrastructure as Code security, and secrets management.
- Strong understanding of OAuth2, OIDC, JWT, mTLS, and modern authentication mechanisms.
- Hands-on programming experience in one or more of Python, Java, JavaScript, Go, or C#.
- Experience building or automating security tooling using scripting or APIs.
- Experience performing threat modeling and architecture reviews.
- Strong communication, technical leadership, mentoring, systems-thinking, and ability to influence senior engineering stakeholders.
- Curiosity about emerging technologies, particularly AI, and commitment to responsible AI adoption.
Benefits
- Opportunity to improve access to healthcare and medications for millions of patients.
- Collaborative, cross-functional environment focused on learning, curiosity, and innovation.
- Equal opportunity workplace that values diversity.