Product Security Engineer

About the role

You will join our global Product Security team to test our products the way an attacker would — finding real, exploitable risk across web applications, APIs, containers, cloud environments and AI-enabled features, and working with engineering and product teams to get it fixed. You will work across a wide range of products and systems, so you will build breadth quickly, and your findings will directly shape how securely we design and ship.

What you'll do

• Perform hands-on security testing across web applications, APIs, containers, cloud environments (AWS, Azure, GCP) and AI-enabled features
• Prioritize findings by exploitability and business impact rather than automated severity score alone, and track them through to verified remediation and retest
• Contribute to threat modeling, secure design reviews and architecture discussions early in the development lifecycle, so risks are caught before code ships
• Assess identity and access control weaknesses, authentication and authorization models
• Test AI-enabled features and agentic workflows for prompt injection, tool misuse, excessive agency and other AI-specific failure modes

What you need

• 3–6 yrs of experience
• OWASP
• Cloud security
• Python
• AWS
• GCP
• Azure
• B.Sc or B.Tech or B.E. or BCA

Good to have

• CEH
• Mainframe
• Git
• LLMs
• Manual testing
• Postman