Product Security Engineer - Application Security
First seen by Alion on Nov 6, 2026.
Product Security Engineer - Application Security
We are looking for an experienced Product Security Engineer with strong expertise in Application Security to drive security initiatives across the Secure Software Development Lifecycle (SSDLC). The candidate will work closely with software development, architecture, DevOps and quality engineering teams to identify vulnerabilities, strengthen application security and ensure secure product development.
Key Responsibilities :
- Drive Application Security initiatives across the Secure Software Development Lifecycle (SSDLC).
- Conduct application security assessments using SAST, DAST and Software Composition Analysis (SCA) tools.
- Identify, assess and remediate application vulnerabilities and security risks.
- Perform secure code reviews and recommend secure coding practices.
- Manage vulnerability assessment, prioritisation, remediation and verification.
- Review Software Bill of Materials (SBOM) and assess third-party software dependencies.
- Collaborate with development and DevOps teams to integrate security practices into CI/CD pipelines.
- Define and implement secure design and development standards.
- Provide guidance on cryptography, authentication, authorisation and secure communications.
- Support Product Security governance and compliance initiatives.
Required Skills & Qualifications :
- 6 - 9 years of experience in Product Security, Application Security or Software Security.
- Strong hands-on experience with SAST, DAST and SCA tools.
- Good understanding of Secure Software Development Lifecycle (SSDLC).
- Experience in secure code reviews and application vulnerability assessments.
- Knowledge of OWASP Top 10 and common application security vulnerabilities.
- Experience in vulnerability management and risk assessment.
- Knowledge of SBOM and software supply chain security.
- Understanding of cryptography, IAM and network security.
- Experience working with software development and DevOps teams.
Skills
Vulnerability Assessment, OWASP, Applications Security, Cyber Security, Information Security, SAST, DAST