Product Security Engineer
Hitachi, Ltd.3 days ago
Pune, IndiaSenior
Responsibilities
- Act as the primary product security contact for Engineering, Product, and Support teams and assess product architectures, technology stacks, APIs, integrations, and deployment models.
- Perform vulnerability triage, reproduction, validation, risk assessment, prioritization, remediation tracking, reporting, and root cause analysis.
- Lead vulnerability management across SAST, DAST, SCA, penetration testing, bug bounty, and customer-reported findings, including remediation SLAs and fix validation.
- Promote Secure SDLC and secure coding practices, conduct code reviews, develop security standards, and guide engineering teams on remediation.
- Integrate security controls and scanning tools into CI/CD pipelines and automate security validation across Kubernetes, Docker, containers, infrastructure as code, and cloud-native deployments.
- Investigate product security incidents, support incident response, recommend preventive controls, and maintain security documentation.
- Support SOC 2, ISO 27001, NIST, CIS, customer security assessments, audits, evidence collection, and remediation tracking.
- Mentor teams, deliver security awareness and secure coding training, and serve as a Product Security subject matter expert.
Requirements
- At least 8 years of experience in Application Security, Product Security, Cybersecurity, DevSecOps, or Software Engineering.
- Strong knowledge of OWASP Top 10, CWE, CVSS, secure coding, vulnerability assessment, security triage, remediation, and risk analysis.
- Understanding of enterprise architectures, APIs, microservices, distributed systems, SaaS, OAuth, OIDC, SAML, and IAM.
- Hands-on experience with Black Duck, Black Duck SRM, AppScan, Qualys, SonarQube, Burp Suite, and dependency scanning tools.
- Familiarity with Kubernetes, Docker, CI/CD security, DevSecOps, AWS, Azure, container security, and cloud-native environments.
- Proven vulnerability remediation experience and strong analytical, troubleshooting, and cross-functional collaboration skills.
- Preferred certifications include CISSP, CSSLP, Security+, GIAC, CCSP, AWS Security, or Azure Security.
Benefits
- Industry-leading benefits, support, and services focused on holistic health and wellbeing.
- Flexible work arrangements may be available depending on the role and location.
- Life-balance support, autonomy, freedom, ownership, and a collaborative, inclusive work environment.
About Hitachi, Ltd.
Hitachi, Ltd. builds industrial, energy, rail, and digital systems for governments and enterprises, combining operational technology with IT, cloud, and data infrastructure services. Its portfolio spans power grids, factory automation, data centers, rail systems, and consulting delivered through units such as Hitachi Vantara, Hitachi Rail, and Hitachi Energy. Founded in 1910 and headquartered in Tokyo, it is listed on the Tokyo Stock Exchange and operates globally across critical infrastructure markets.