15 hours ago
Bengaluru, IndiaSenior
Responsibilities
- Own and improve the secure software development lifecycle across product development stages.
- Manage software supply chain security covering open-source packages, third-party binaries, container base images, build tools, and other dependencies.
- Own first-party software security, including code and container scanning, automated CI security testing, external penetration tests, and software integrity and provenance.
- Run the responsible vulnerability disclosure program, including external report triage and review-process improvements.
- Partner with engineering teams on security design reviews, secure architectures, product risk assessments, and security best practices.
- Define security policies and secure coding standards, deliver security awareness and secure coding training, and communicate technical risks to executive stakeholders.
Requirements
- 10+ years of experience in software engineering, application security, security engineering, or product security.
- Deep knowledge of Secure SDLC, Secure by Design, Secure by Default, OWASP, ISO 27001, NIST SP 800-53, and IEC 62443-4-2.
- Experience with security architecture reviews, reusable security reference architectures, Microsoft Security Baselines, Bow-Tie models, and product security risk assessments.
- Proficiency with STRIDE, DREAD, PASTA, and MITRE ATT&CK, including experience using IriusRisk and Microsoft Threat Modeling Tool.
- Practical DevSecOps and application security experience with CI/CD security testing, SAST, SCA, DAST, vulnerability scanning, and SBOM management.
- Experience with SonarQube, WizCode, Black Duck Hub, Nmap, Nessus, Qualys, Burp Suite, and OWASP Dependency-Track.
- Deep understanding of cloud-native architectures, microservices, Kubernetes, containers, multi-tenant SaaS environments, and security controls across Microsoft Azure, AWS, and GCP.
- Knowledge of OpenID Connect, OAuth 2.0, SAML, mTLS, TLS, AES, RSA, ChaCha20-Poly1305, SHA, ECC, and Diffie-Hellman key exchange.
- Experience with vulnerability triage, coordinated vulnerability disclosure, product risk remediation, and GRC aligned with ISO 27005, NIST SP 800-37, SOX, GDPR, the Cyber Resilience Act, and IEC 62443.
- Bachelor’s degree in Computer Science or a related field, plus the ability to influence engineering and product leadership and communicate technical risks effectively.
Benefits
- Hybrid work model in Bangalore, India.
- Opportunity to contribute to ABB Motion Services’ digital products and solutions supporting energy efficiency, uptime, and industrial innovation.
Tech Stack
Categories
About ABB
ABB builds electrification, robotics, motion, and process automation hardware and software for industrial, utility, transportation, and infrastructure customers. Its portfolio spans motors and drives, robots, PLCs, switchgear, and EV charging, sold as equipment, systems, and services under the ABB Ability platform. Formed in 1988 and headquartered in Zurich, it is a public company traded on the SIX Swiss Exchange and NYSE.