Senior Product Security Engineer
ConnectWise8 hours ago
Mumbai, IndiaSenior
Responsibilities
- Support cross-functional teams as a product security subject matter expert.
- Conduct security assessments, threat modeling, attack surface analysis, application security reviews, and vulnerability reporting.
- Develop security architecture patterns, penetration-testing methodologies, application security standards, and secure development processes.
- Communicate findings, attack paths, risks, and remediation recommendations to technical and executive stakeholders.
- Embed security gates and secure software development lifecycle controls into product development processes.
- Serve as the security authority and control owner for assigned products, ensuring security requirements and controls are implemented and vulnerabilities are remediated within SLAs.
- Participate in requirements gathering, secure coding and configuration, software testing, third-party component management, and defect management.
- Coach, review, or delegate work to other team members as needed.
Requirements
- Bachelor’s degree in a related field or equivalent business experience.
- 6+ years of relevant experience.
- Experience securing enterprise-grade web applications.
- Experience with automated application security tools and technologies such as SAST, DAST, and SCA.
- Experience with web application security issues and standards, including OWASP Top 10 and SANS Top 25.
- Understanding of languages such as .NET, Python, JavaScript, and Go.
- Strong foundation in information security principles including encryption and authentication.
- Ability to identify application vulnerabilities, recommend remediation, manage projects independently, and explain complex security topics to technical and non-technical stakeholders.
Tech Stack
Categories
About ConnectWise
ConnectWise builds a SaaS platform used by managed service providers and technology solutions providers to run as-a-service operations, including PSA/business management, RMM, remote access, quoting, and cybersecurity tools. It sells subscriptions and an ecosystem of integrations and community resources under The IT Nation. Founded in 1982 and headquartered in Tampa, the company is privately held under Thoma Bravo.