Lead Product Security Engineer

An Amazing Career Opportunity for Lead Product Security Engineer
Location: Chennai, India (Hybrid)
Job ID: 52176

Profile Summary
The Product Vulnerability Management Engineer supports the execution of the enterprise product vulnerability management program. Reporting to the Senior Product Vulnerability Manager, this role works with development, Information Security, and product security teams to identify, triage, track, and remediate product vulnerabilities in line with established processes, risk frameworks, and service-level expectations.           

About HID Global

HID Global powers the trusted identities of the world’s people, places and things. We make it possible for people to transact safely, work productively and travel freely. Our trusted identity solutions give people secure and convenient access to physical and digital places and connect things that can be accurately identified, verified and tracked digitally. Millions of people around the world use HID products and services to navigate their everyday lives, and over 2 billion things are connected through HID. We work with governments, educational institutions, hospitals, financial institutions, industrial businesses, and some of the most innovative companies on the planet. Headquartered in Austin, Texas, HID Global has over 4500 employees worldwide and operates international offices that support more than 100 countries. HID Global^® is an ASSA ABLOY Group brand. HID Global has is the trusted source for secure identity solutions for millions of customers and users around the world. In India, we have two Engineering Centre (Bangalore and Chennai). Global Engineering Team is based in Chennai and one of the Business Unit Engineering team is based in Bangalore. Check us out: www.hidglobal.com and https://youtu.be/23km5H4K9Eo

LinkedIn:  www.linkedin.com/company/hidglobal/mycompany/

Are You Ready to Join the Team?

Our company is committed to finding the best and the brightest talent to help us reach the top. If you are a dynamic, highly skilled, experienced Cloud engineer and technology enthusiast, and you enjoy working in a rapid pace within a rapidly growing business environment, then you will want to consider this position. If you excel at communication, collaboration, and unrelenting innovation, we want to talk to you. And if you bring dedication, positive energy and integrity to the table, you just might be the right fit for our team.

Qualifications
The individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

Duties and Responsibilities include and are not limited to the following:

• Review and triage vulnerabilities identified through security scanning tools, penetration tests, external reports, and internal security assessments.
• Work with Information Security, Development, DevOps, and Product Security teams to validate findings, determine ownership, and coordinate remediation.
• Track vulnerabilities from intake through closure, including remediation status, due dates, validation evidence, and exceptions.
• Apply established vulnerability-severity and prioritization frameworks, considering CVSS, application criticality, exposure, data sensitivity, exploitability, and customer impact.
• Follow up with development teams on remediation progress and escalate overdue, blocked, urgent, or critical items to the appropriate stakeholders.
• Participate in emergency response calls for urgent and critical vulnerabilities; document actions, owners, deadlines, and closure evidence.
• Familiarity with application-security tooling and workflows, including integration of SAST, SCA, and secret scanning into CI/CD pipelines.
• Hands-on experience reviewing and triaging findings from SAST, SCA, secret scanning/secret-management tools, and penetration tests.
• Understanding of dependency vulnerabilities, exposed secrets, common application vulnerabilities, and remediation best practices.
• Experience supporting penetration-test finding validation, tracking, and remediation with development teams.
• Assist with coordinated vulnerability disclosure activities, including intake tracking, communications support, vulnerability validation, and documentation.
• Maintain accurate records in vulnerability-management, ticketing, and reporting systems.
• Support vulnerability metrics and dashboards, including SLA compliance, backlog, remediation aging, and finding trends.
• Help maintain playbooks, standard operating procedures, knowledge articles, and training materials.
• Support SBOM-related vulnerability monitoring and response for third-party and open-source components.
• Identify recurring issues, process gaps, or tooling problems and recommend improvements to the team.

Preferred  Qualifications:

• Exposure to PSIRT or coordinated vulnerability disclosure processes.
• Familiarity with SBOMs, open-source dependency risks, and software supply-chain security.
• Basic scripting or data-analysis skills using Python, SQL, PowerShell, or similar tools.
• Experience in a regulated, enterprise, cloud, IoT, or connected-product environment.
• Certifications such as Security+, CEH, GIAC, or comparable credentials.
  
  

Education And/Or Qualification:

• 8-10 years of experience in application security, product security, vulnerability management, security engineering, or a related discipline.
• Practical experience with vulnerability-management processes, including triage, remediation tracking, and closure validation.
• Working knowledge of common application-security vulnerabilities and OWASP principles.
• Familiarity with vulnerability-scanning tools such as SAST, DAST, SCA, container scanning, or infrastructure vulnerability scanners.
• Familiarity with penetration-testing processes and the ability to understand and coordinate remediation of test findings.
• Understanding of CVSS and risk-based vulnerability prioritization.
• Experience working with development or DevOps teams in an Agile software-development environment.
• Strong attention to detail, organization, follow-through, and written communication skills.

Why apply? 

• Empowerment: You’ll work as part of a global team in a flexible work environment, learning and enhancing your expertise. We welcome an opportunity to meet you and learn about your unique talents, skills, and experiences. You don’t need to check all the boxes. If you have most of the skills and experience, we want you to apply.
• Innovation: You embrace challenges and want to drive change. We are open to ideas, including flexible work arrangements, job sharing or part-time job seekers.
• Integrity: You are results-orientated, reliable, and straightforward and value being treated accordingly. We want all our employees to be themselves, to feel appreciated and accepted.

This opportunity may be open to flexible working arrangements.

HID is an Equal Opportunity/Affirmative Action Employer – Minority/Female/Disability/Veteran/Gender Identity/Sexual Orientation.