{"id":655321,"url":"https://alion.io/job/lenskart-product-security-engineer-devsec-ops","title":"Product Security Engineer (Devsec Ops)","company":{"id":689,"name":"Lenskart","domain":"lenskart.com","url":"https://alion.io/company/lenskart","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Recruitee","truth_index":{"grade":"B","score":77,"open_postings":65,"ghost_share":0.308,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":117,"computed_at":"2026-10-19T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gurgaon, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14500,"max_usd":34000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":714},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Burp Suite","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab","optional":false},{"name":"GitLab CI","optional":false},{"name":"IAM","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SonarQube","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Veracode","optional":false},{"name":"CloudFormation","optional":true},{"name":"STRIDE","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2025-12-27T18:08:37Z","employer_posted_date":"2025-12-27","last_verified_at":"2026-10-20T01:00:51Z","board_verified":true,"closed_at":null,"days_open":296,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":295},"description":"We are looking for a Product Security Engineer with 3 to 5 years of hands-on experience in identifying, assessing, and mitigating security risks across our products and platforms. The ideal candidate will work closely with engineering, DevOps, and product teams to integrate security throughout the software development lifecycle (SDLC) and ensure the security of our applications and infrastructure.\nKey Responsibilities\nConduct application security assessments, threat modeling, and code reviews for products and services.\n\nPerform static (SAST), dynamic (DAST), and software composition (SCA) analysis using modern tools.\n\nCollaborate with development teams to embed security controls in CI/CD pipelines.\n\nReview and enhance security architecture for web, mobile, and API-based applications.\n\nWork with DevOps teams to strengthen cloud security posture (AWS/GCP/Azure).\n\nInvestigate and respond to product security incidents and vulnerability reports.\n\nSupport bug bounty triage and coordinate fixes with engineering teams.\n\nDocument and enforce secure coding practices and security guidelines.\n\nParticipate in design and architecture reviews to ensure security-by-design principles.\n\nRequirements\n3 to 5 years of experience in Application Security or Product Security roles.\n\nStrong knowledge of OWASP Top 10 Web, Mobile, API Security Top 10, and secure development practices.\n\nExperience in Infrastructure security ( External and Internal)\n\nHands-on experience with tools like Burp Suite, ZAP, Check Marx, SonarQube, Veracode, GitLab Security, etc.\n\nFamiliarity with CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins) and integrating security scans.\n\nKnowledge of cloud security (AWS, Azure, GCP) and exposure to IAM, KMS, and network controls.\n\nScripting knowledge (Python, Bash, or PowerShell) for automating security tasks.\n\nUnderstanding of container and Kubernetes security concepts.\n\nGood to Have\nExperience with threat modeling (STRIDE, PASTA, etc.).\n\nFamiliarity with infrastructure as code (Terraform, CloudFormation) security validation.\n\nExposure to DevSecOps practices and security orchestration.\n\nCertifications such as CEH, OSCP, CSSLP, or AWS Security Specialty are a plus.","description_format":"text","description_chars":2195,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Eyewear","Optometry & Optical Stores"],"lifecycle":[{"event":"open","at":"2026-09-10T20:52:35Z"}],"visa":[],"liveness":{"score":8,"band":"cold","label":"Long shot","p_open":1,"p_active":0.3,"p_room":0.28,"age_days":295,"expected_fill_days":117,"reasons":["conf:1","ghost","win:tail","crowd:"],"computed_at":"2026-10-19T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/lenskart-product-security-engineer-devsec-ops","json_url":"https://alion.io/job/lenskart-product-security-engineer-devsec-ops.json","meta":{"generated_at":"2026-10-20T02:09:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2451,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":689},"rest":"https://alion.io/mcp/rest/get_company?id=689"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flenskart-product-security-engineer-devsec-ops"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flenskart-product-security-engineer-devsec-ops"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flenskart-product-security-engineer-devsec-ops"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/lenskart-product-security-engineer-devsec-ops\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flenskart-product-security-engineer-devsec-ops"}]}