3 months ago
Bengaluru, IndiaStaff+
Responsibilities
- Research and build AI-powered security capabilities for SAST, SCA, DAST, and CI/CD pipelines.
- Investigate attack vectors involving code, dependencies, build systems, CI/CD pipelines, cloud environments, and AI-assisted development.
- Develop, prototype, and validate AI-assisted vulnerability detection and testing methods.
- Conduct technical assessments of applications, APIs, source repositories, and build pipelines.
- Collaborate with engineering, product, customers, and internal teams to integrate research into workflows and platform features.
- Contribute to pre-sales enablement through proofs of concept, demonstrations, and solution design.
- Build internal tools and automation for vulnerability discovery, analysis, and security research.
- Publish research and share findings through blogs, whitepapers, and conference presentations.
- Monitor emerging threats and improve product detection and protection capabilities.
Requirements
- Bachelor’s or master’s degree in computer science, cybersecurity, or a related field.
- 8–10+ years of experience focused on security research and application security.
- Strong experience with shift-left security tools, including SAST, DAST, and SCA, including scanning rules, engines, or pipelines.
- Hands-on development experience with modern programming languages, frameworks, and build systems.
- Understanding of AI and LLM models, their developer-workflow integration, and related security risks.
- Deep understanding of the OWASP Top 10, API Security Top 10, LLM Top 10, and CI/CD Security Top 10.
- Experience evaluating or mitigating risks from AI-generated code and dependency suggestions.
- Proficiency in at least one modern programming language such as Python, Go, Java, or JavaScript.
- Familiarity with npm, PyPI, Maven, Go modules, dependency management, and open-source risk analysis.
- Ability to independently lead complex research from hypothesis through validation and implementation.
- Strong cross-functional collaboration, analytical, and problem-solving skills.
- Security research publications, technical blogs, conference presentations, or certifications such as OSCP, OSCE, or CEH are preferred.
Benefits
- Hybrid work arrangement from the Bengaluru, India office.
Tech Stack
Categories
About Harness
Harness builds a SaaS platform for software delivery, combining CI/CD, feature flags, cloud cost management, reliability, and security tooling for engineering and DevOps teams. The privately held company, founded in 2016 and headquartered in San Francisco, sells to enterprises adopting cloud and Kubernetes. Notable customers include United Airlines, Morningstar, and Choice Hotels, and its offerings span testing, deployments, governance, and automation across the software delivery lifecycle.