1 day ago
Bengaluru, IndiaSenior
Responsibilities
- Own product-security operations, including customer security escalations, security-alert triage, vulnerability management, SLAs, and remediation tracking.
- Identify, prioritize, and remediate vulnerabilities across the Harness platform in partnership with engineering teams.
- Operate and tune SAST, SCA, cloud, and container scanning tools, reducing noise and maintaining consistent reporting.
- Integrate security scans, gates, and software-supply-chain controls into Harness, GitHub Actions, or similar CI/CD pipelines.
- Drive internal adoption of Harness STO and SCS and establish real-world secure-delivery workflows.
- Support release security advisories, customer-facing vulnerability summaries, penetration tests, incident response, and compliance evidence.
- Establish software supply-chain practices involving dependency management, artifact integrity, and SLSA-oriented controls.
- Evaluate security tools, automate vulnerability management and reporting, apply OWASP guidance, and train engineering, platform, and DevOps teams.
Requirements
- Proven experience in product security, vulnerability management, and secure software development lifecycle practices.
- Hands-on expertise with OWASP ZAP, Burp Suite, Snyk, Prisma Cloud, Semgrep, or equivalent tools.
- Strong understanding of CI/CD processes, shift-left security, threat modeling, secure coding, and software supply-chain security.
- Working knowledge of the OWASP Top 10 and practical product vulnerabilities such as injection, broken access control, SSRF, and insecure design.
- Familiarity with AI security concerns involving AI-generated code, LLM applications, agents, prompt injection, sensitive-data exposure, insecure tool use, and the OWASP LLM Top 10.
- Familiarity with SAST, DAST, IaC, and SCA testing and the ability to evaluate scanning tools.
- Working knowledge of AWS, GCP, or Azure and securing applications running in Docker and Kubernetes.
- Experience automating security workflows with Python, Go, or similar languages.
- Strong collaboration, communication, training, and security-enablement skills.
Tech Stack
Categories
About Harness
Harness builds a SaaS platform for software delivery, combining CI/CD, feature flags, cloud cost management, reliability, and security tooling for engineering and DevOps teams. The privately held company, founded in 2016 and headquartered in San Francisco, sells to enterprises adopting cloud and Kubernetes. Notable customers include United Airlines, Morningstar, and Choice Hotels, and its offerings span testing, deployments, governance, and automation across the software delivery lifecycle.