Product Security Engineer (VM)

At Infoblox, every breakthrough begins with a bold “what if.”

What if your ideas could ignite global innovation?

What if your curiosity could redefine the future?

We invite you to step into the next exciting chapter of your career journey. Bring your creativity, drive, your daring spirit, and feel what it’s like to thrive on a team big enough to make an impact, yet small enough to make a difference. Our cloud-first networking and security solutions already protect 70% of the Fortune 500, and we’re looking for creative thinkers ready to push that influence even further. Join us and discover how far your bold “what if” can take the world, your community, and your career.

How we empower our people is extraordinary: we’re recognized as a Glassdoor Best Place to Work 2025, Great Place to Work-Certified in five countries, and honored by Cigna as a Healthy Workforce honors recipient for three consecutive years; and what we build is world class: named CybersecAsia’s Best in Critical Infrastructure 2024 - clear evidence that when first-class technology meets empowered talent, remarkable careers take shape. So, what if the next big idea, and the next great career story, comes from you? Become the force that turns every “what if” into “what’s next.”

In a world where you can be anything, Be Infoblox.

Product Security Engineer

We have an opportunity for a Product Security Engineer to join our Product Security Engineering team in Bangalore, reporting to the Senior Manager, Product Security Engineering. In this pivotal role, you will identify, prioritize, and drive remediation of vulnerabilities across Infoblox products, cloud infrastructure, containers, and software-as-a-service (SaaS) services.

Collaborating closely with engineering and DevOps teams, you will help strengthen product security while building your skills across security engineering and incident response. You will use approved AI and large language model (LLM) tools to accelerate vulnerability triage, CVE analysis, reporting, and remediation guidance, while applying sound judgment and human oversight. You will also help automate the vulnerability-management lifecycle so the team can scale without adding manual effort.

Be a Contributor - What You’ll Do

• Run regular vulnerability scans and assessments across Infoblox products, containers, Kubernetes environments, and cloud infrastructure using industry-standard tools

• Analyze scan results, Common Vulnerabilities and Exposures (CVEs), penetration-test findings, and security advisories

• Prioritize vulnerabilities based on exploitability, exposure, risk, business impact, and applicable service-level agreements (SLAs), with guidance from senior engineers on complex cases

• Validate vulnerability exploitability using established procedures, diagnostic scripts, and available environmental evidence, then provide clear remediation guidance

• Coordinate with engineering and DevOps teams to assign findings, track remediation, follow up on overdue items, and verify closure

• Monitor vendor notifications, security advisories, and cyber threat intelligence to identify vulnerabilities that affect Infoblox products and services

• Produce vulnerability reports and metrics, including time to remediate, vulnerability aging, risk trends, and SLA adherence

• Deploy, manage, troubleshoot, and maintain vulnerability-management and security tools with minimal oversight

• Handle tier-two operational tasks and incidents with manager oversight, and participate in incident response when vulnerabilities are actively exploited

• Use approved AI and LLM tools daily to triage findings, assess CVE applicability, summarize advisories, draft remediation guidance, and improve security-team productivity

Be Prepared - What You Bring

• Two or more years of experience in vulnerability management, security engineering, product security, or a related security role; an advanced degree or equivalent practical experience will also be considered

• Working knowledge of vulnerability-management principles, CVE and Common Vulnerability Scoring System (CVSS) scoring, common vulnerabilities, attack vectors, exploitation techniques, and risk-based prioritization; basic penetration-testing knowledge is a plus

• Hands-on experience with vulnerability-scanning tools such as Wiz, Qualys, Nessus, or Trivy, and vulnerability databases such as the National Vulnerability Database (NVD)

• Familiarity with at least one cloud platform, such as AWS, Azure, or GCP, as well as Kubernetes and container technologies

• Scripting and automation skills in Python, Bash, or a similar language, including experience working with APIs and integrating security tools with ticketing or workflow systems

• Ability to break complex problems into smaller parts, follow diagnostic procedures, assess evidence, and communicate practical remediation recommendations

• Hands-on experience using AI and LLM tools for security research, vulnerability triage, analytics, automation, documentation, or decision support, with the judgment to validate outputs and protect confidential information

• Interest in building AI-assisted workflows or agents; experience with prompt engineering, Model Context Protocol (MCP), or agent frameworks is a plus

• Familiarity with NIST, ISO 27001, FedRAMP, or comparable security frameworks as they relate to vulnerability management

• Strong analytical, communication, and collaboration skills, with the ability to work effectively with engineering, DevOps, and security teams; a Bachelor of Science or Bachelor of Technology degree in Computer Science, Computer Engineering, Electrical Engineering, Electronics and Communication Engineering, or a related field is preferred. CEH, CompTIA Security+, or cloud-security certifications are a plus

Be Successful - Your Path

First 90 Days: Immerse in our culture, connect with mentors (Blox Buddies), and map the systems and meet with key stakeholders that rely on your work. Discuss and create short- and long-term goals.

Six Months:

• Understand the scope of Infoblox products, cloud infrastructure, containers, and SaaS services that require vulnerability management

• Understand the vulnerability-management process, tools, SLAs, reporting requirements, and related compliance obligations

• Build working relationships with key engineering, DevOps, cloud, and security stakeholders

• Triage and prioritize vulnerabilities with moderate guidance, then track findings through remediation and closure

• Use the team’s approved AI tools and automation as a routine part of daily vulnerability-management work

One Year:

• Contribute reliably to the product vulnerability-management program across multi-cloud infrastructure, on-premises environments, containers, and SaaS products

• Help reduce average time to remediate vulnerabilities and improve SLA adherence

• Build or improve at least one automation or AI-assisted workflow, with senior-engineer oversight, that reduces manual vulnerability-management effort

• Produce accurate, actionable vulnerability metrics and remediation guidance for engineering stakeholders

• Gain exposure to other Product Security Engineering capabilities, such as security engineering and incident response

Belong -Your Community

Our culture thrives on inclusion, rewarding the bold ideas, curiosity, and creativity that move us forward. In a community where every voice counts, continuous learning is the norm. So, whether you code, create, sell, or care for customers, you’ll grow and belong here.

Be Rewarded -Benefits That Help You Grow, Thrive, Belong

• Comprehensive health coverage, generous PTO, and flexible work options

• Learning opportunities, career-mobility programs, and leadership workshops

• Sixteen paid volunteer hours each year, global employee resource groups, and a “No Jerks” policy that keeps collaboration healthy

• Modern offices with EV charging, healthy snacks, plus hackathons, game nights, and culture celebrations

• Charitable Giving Program supported by Company Match

Location

Bangalore, India - Hybrid

Ready to Be the Difference?

Infoblox is an Affirmative Action and Equal Opportunity Employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, national origin, genetic information, age, disability, veteran status, or any other legally protected basis