{"id":1521564,"url":"https://alion.io/job/sunovaa-tech-senior-applicationproduct-security-engineer","title":"Senior Application/Product Security Engineer","company":{"id":3800722,"name":"Sunovaa Tech","domain":"sunovaa.com","url":"https://alion.io/company/sunovaa-tech","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India","Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":20000,"max_usd":44000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Threat Modeling","optional":false},{"name":"OWASP","optional":true},{"name":"OWASP Top 10","optional":true}],"status":"live","first_seen_at":"2026-09-30T11:46:21Z","employer_posted_date":null,"last_verified_at":"2026-09-30T11:46:21Z","board_verified":false,"closed_at":null,"days_open":5,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":5},"description":"Job Description : \n\nWe are looking for a Senior Application / Product Security Engineer with 7+ years of relevant experience in application security, product security, secure software development, cloud security, and container/Kubernetes security.\n\nThe candidate should have strong hands-on experience in securing applications and products throughout the Software Development Life Cycle (SDLC) and should be comfortable working with engineering, DevOps, cloud, and product teams.\n\nMandatory Technical Skills : \n\nCandidates must have hands-on experience in ALL of the following areas : \n\nApplication Security / Product Security / Secure SDLC : \n\n- Strong experience integrating security throughout the Software Development Life Cycle.\n\n- Experience identifying and mitigating application and product security vulnerabilities.\n\n- Secure coding practices, security reviews, vulnerability management, and security testing.\n\nThreat Modeling & Risk Assessment : \n\n- Hands-on experience performing threat modeling for applications/products.\n\n- Ability to identify security threats, attack vectors, vulnerabilities, and associated risks.\n\n- Experience with security risk assessment and defining appropriate mitigation strategies.\n\nAzure / AWS Cloud Security : \n\n- Strong hands-on experience securing workloads deployed on Microsoft Azure and/or AWS.\n\n- Knowledge of cloud security architecture, IAM, network security, data protection, security monitoring, and cloud security best practices.\n\n- Experience identifying and mitigating cloud-specific security risks.\n\nContainer & Kubernetes Security : \n\n- Hands-on experience securing Docker/containerized applications and Kubernetes environments.\n\n- Knowledge of container image security, vulnerabilities, runtime security, Kubernetes RBAC, secrets management, network policies, and workload security.\n\n- Experience implementing security controls in containerized environments.\n\nKey Responsibilities : \n\n- Drive application and product security initiatives across the complete SDLC.\n\n- Conduct threat modeling and security risk assessments for applications and products.\n\n- Work closely with development teams to identify and remediate security vulnerabilities.\n\n- Define and implement secure development practices and security controls.\n\n- Assess and improve security of applications deployed on AWS/Azure.\n\n- Review cloud architectures and identify potential security risks.\n\n- Implement and assess security controls for Docker and Kubernetes environments.\n\n- Collaborate with DevOps, Cloud, Engineering, and Product teams to integrate security into CI/CD pipelines.\n\n- Support vulnerability assessment, remediation, and security validation activities.\n\n- Provide security guidance to engineering teams and help establish secure-by-design practices.\n\n- Contribute to security standards, guidelines, and best practices across products and applications.\n\nMandatory Requirements : \n\n- 7+ years of relevant cybersecurity/application security experience.\n\n- Strong experience in Application Security / Product Security / Secure SDLC.\n\n- Hands-on experience in Threat Modeling and Risk Assessment.\n\n- Hands-on experience in Azure and/or AWS Cloud Security.\n\n- Hands-on experience in Container and Kubernetes Security.\n\nPreferred Experience : \n\n- DevSecOps / CI/CD security\n\n- SAST / DAST / SCA\n\n- OWASP Top 10\n\n- Vulnerability management\n\n- Security architecture and design reviews\n\n- IAM and secrets management\n\n- Docker security\n\n- Kubernetes security\n\n- Cloud-native security\n\n- Security automation and scripting\n\nCandidate Profile : \n\nThe ideal candidate will be a hands-on security professional who can work across Application Security, Product Security, Cloud Security, and Container/Kubernetes Security, rather than someone with experience limited to SOC, network security, or compliance.\n\nRelevant experience matters more than generic cybersecurity experience.\n\nSkills\nCloud Security, Kubernetes, AWS, Azure, Docker, SDLC, DevSecOps, Vulnerability Management, Applications Security, OWASP","description_format":"text","description_chars":4031,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["AI Consulting & Integration","Analytics & BI Consulting"],"lifecycle":[{"event":"open","at":"2026-09-30T12:00:00Z"}],"visa":[],"liveness":{"score":87,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.874,"p_room":1,"age_days":4,"expected_fill_days":23,"reasons":["seen:4","velocity","win:early"],"computed_at":"2026-10-05T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/sunovaa-tech-senior-applicationproduct-security-engineer","json_url":"https://alion.io/job/sunovaa-tech-senior-applicationproduct-security-engineer.json","meta":{"generated_at":"2026-10-06T02:06:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":3113,"day_limit":5000,"remaining_today":1887,"minute_limit":60,"resets_at":"2026-10-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3800722},"rest":"https://alion.io/mcp/rest/get_company?id=3800722"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsunovaa-tech-senior-applicationproduct-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsunovaa-tech-senior-applicationproduct-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsunovaa-tech-senior-applicationproduct-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sunovaa-tech-senior-applicationproduct-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsunovaa-tech-senior-applicationproduct-security-engineer"}]}