Product Security Engineer (Devsec Ops)
GurugramFull-time3–5 yrsPosted open since dec 2025
Mid-level cybersecurity role at Lenskart in Gurugram. Needs 3–5 years.
About the role
We are looking for a Product Security Engineer with 3 to 5 years of hands-on experience in identifying, assessing, and mitigating security risks across our products and platforms. The ideal candidate will work closely with engineering, DevOps, and product teams to integrate security throughout the software development lifecycle (SDLC) and ensure the security of our applications and infrastructure.
What you'll do
- Conduct application security assessments, threat modeling, and code reviews for products and services
- Perform static (SAST), dynamic (DAST), and software composition (SCA) analysis using modern tools
- Collaborate with development teams to embed security controls in CI/CD pipelines
- Review and enhance security architecture for web, mobile, and API-based applications
- Work with DevOps teams to strengthen cloud security posture (AWS/GCP/Azure)
What you need
- Cloud security
- OWASP
- IAM
- Python
- CI/CD
- AWS
Good to have
- CEH
- Terraform
- GCP
- Azure
- Git
- Jenkins