Senior Security Engineer - Product Security
Ecolab Inc.24 hours ago
Bengaluru, IndiaSenior
Responsibilities
- Conduct product security risk assessments for mobile, web, API, and IoT applications.
- Perform and remediate findings from SAST, DAST, and manual penetration testing.
- Simulate attacks and produce detailed vulnerability reports.
- Review applications and source code for security flaws and recommend mitigation strategies.
- Guide engineering teams on secure development practices, secure architecture, and remediation.
- Deliver secure coding training to development and engineering teams.
- Integrate security into CI/CD pipelines and developer workflows, including DevSecOps automation.
- Secure AI APIs, ML pipelines, and LLM-based applications.
- Apply threat modeling, attack simulation, API security, infrastructure-as-code security, and secrets management practices.
- Monitor emerging threats, vulnerabilities, and countermeasures while collaborating with stakeholders and business partners.
Requirements
- Bachelor’s degree in computer science, information technology, or a related discipline.
- 6–8 years of experience in product security.
- Hands-on experience with application security, SAST, DAST, container security, and manual penetration testing.
- Strong expertise in OWASP Top 10, CWE Top 25, data protection principles, secure design patterns, and threat mitigation.
- Proficiency in interpreting and writing Python, JavaScript/TypeScript, Java, C#/.NET, and Apex.
- Experience with multi-cloud and hybrid application architecture, CI/CD security integration, WAF technologies, and automated security processes.
- Knowledge of OWASP Top 10 for LLMs, emerging AI security frameworks, prompt injection, data poisoning, and model theft.
- Experience with threat modeling and attack simulation techniques.
Tech Stack
Categories
About Ecolab Inc.
Ecolab Inc. builds and sells water treatment chemicals and equipment, hygiene and infection-prevention products, and on-site service and digital monitoring for industrial and institutional customers. A NYSE-listed public company founded in 1923 and headquartered in St. Paul, Minnesota, it serves food, healthcare, life sciences, hospitality, manufacturing, and energy markets worldwide; its portfolio includes Nalco Water and, in data centers, CoolIT liquid-cooling solutions.