Product Security Engineer (Vulnerability Management)

Job Title: Product Security Engineer (Vulnerability Management) Experience: 5–8 Years Job Type: Full Time Notice Period: Immediate to 15 Days Work Location: Remote About the Role We are looking for a highly skilled Product Security Engineer (Vulnerability Management) to join the Product Security Engineering team. In this role, you will work closely with engineering and product teams to reduce security risks across the Software Development Lifecycle (SDLC). You will be responsible for vulnerability management, application security reviews, secure development practices, security automation, and driving remediation efforts across engineering teams. This is an excellent opportunity for security professionals passionate about application security, vulnerability assessment, secure coding practices, cloud security, and developer enablement. Key Responsibilities Triage, validate, prioritize, and manage security vulnerabilities identified through: Manual security reviews Automated security tools Bug bounty programs AI-powered security analysis platforms Participate in security on-call rotations to support: Security incident triage Code reviews Security consultations Collaborate with engineering teams to: Drive vulnerability remediation Provide actionable security recommendations Ensure timely closure of security findings based on risk Review source code, pull requests, and design changes to identify security weaknesses before production deployment. Analyze findings from AI-powered security agents, validate results, eliminate false positives, and improve remediation workflows. Work closely with Product Security Architecture teams to enhance vulnerability detection, prioritization, and remediation processes. Support security incident investigations and perform root cause analysis. Develop security automation, tools, and workflows to improve application security coverage and reduce manual effort. Administer and maintain vulnerability scanning platforms such as Tenable or equivalent tools. Configure and optimize scanning policies, schedules, and reporting. Track remediation progress, generate security metrics, and monitor organizational risk reduction initiatives. Create security documentation, secure coding guidelines, and developer awareness materials. Promote secure-by-design and secure-by-default engineering practices throughout the SDLC. Required Skills & Experience 5–8 years of experience in Application Security or Product Security . Strong understanding of the Secure Software Development Lifecycle (SSDLC/SDLC) . Experience managing vulnerabilities from: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition Analysis (SCA) Dependency scanning Penetration testing Bug bounty programs Hands-on experience reviewing source code and identifying application security vulnerabilities. Strong knowledge of: OWASP Top…