{"id":2857303,"url":"https://alion.io/job/xerox-product-security-engineer","title":"Product Security Engineer","company":{"id":63913,"name":"Xerox","domain":"xerox.com","url":"https://alion.io/company/xerox-corp","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Avature","truth_index":{"grade":"A","score":100,"open_postings":34,"ghost_share":0,"stale_share":0,"repost_share":0.029,"time_to_fill_p50_days":16,"computed_at":"2026-10-19T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18500,"max_usd":40000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"C++","optional":false},{"name":"CVSS","optional":false},{"name":"CWE","optional":false},{"name":"FedRAMP","optional":false},{"name":"JavaScript","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"SBOM","optional":false},{"name":"STRIDE","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"CVE","optional":true},{"name":"Linux","optional":true},{"name":"PKI","optional":true},{"name":"Threat Modeling","optional":true}],"status":"live","first_seen_at":"2026-10-19T15:13:48Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-10-20T02:45:10Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About Xerox Holdings Corporation\nFor more than 100 years, Xerox has continually redefined the workplace experience. Harnessing our leadership position in office and production print technology, we’ve expanded into software and services to sustainably power the hybrid workplace of today and tomorrow. Today, Xerox is continuing its legacy of innovation to deliver client-centric and digitally-driven technology solutions and meet the needs of today’s global, distributed workforce. From the office to industrial environments, our differentiated business and technology offerings and financial services are essential workplace technology solutions that drive success for our clients. At Xerox, we make work, work. Learn more about us at www.xerox.com.\nProduct Security Engineer\nAbout the team\nXerox printers, multifunction devices, software and cloud services are used by enterprises, government agencies and regulated industries around the world. The Product Security team makes sure those products are designed, built and supported securely across their lifecycle, from threat modeling and secure development through vulnerability response and regulatory compliance.\nAbout the role\nAs a Product Security Engineer, you will be the main security partner for product and application teams. You will help them design securely, find and fix vulnerabilities, and meet the security requirements our customers and regulators expect. The role spans embedded devices and firmware, desktop and server software, and cloud services, and offers broad exposure to a varied attack surface.\nWhat you will do:\nSecure design and development\nAct as a security consultant and primary point of contact for product and application teams, giving guidance on secure design, security requirements and vulnerability remediation.\nPerform and review threat models (for example, STRIDE) for devices, firmware, software and cloud services; triage identified threats and recommend mitigations.\nConduct product and application security risk assessments, and evaluate remediation alternatives.\nPromote secure coding practices and help teams integrate security activities and tooling (SAST, DAST, SCA) throughout the Software Development Lifecycle (SDLC).\nSupport teams in addressing weaknesses aligned with the OWASP Top 10, CWE Top 25 and Xerox security standards.\nVulnerability management and incident response\nParticipate in the Product Security Incident Response Team (PSIRT): triage internally and externally reported vulnerabilities, analyze impact across product lines, assign CVSS scores, and coordinate fixes and security bulletins under the Xerox Vulnerability Management and Disclosure Policy.\nSupport investigation of product security incidents, identify root causes and recommend measures to prevent recurrence.\nTrack, prioritize and follow up on remediation to ensure timely resolution of security findings.\nSupport Software Bill of Materials (SBOM) and third-party component risk management.\nStandards and compliance\nHelp product teams meet security requirements from regulations and certification programs such as the EU Cyber Resilience Act, FedRAMP, Common Criteria and FIPS 140-3.\nDevelop and maintain product security guidance, standards and best practices.\nProgram and engagement\nDrive security awareness, office hours, knowledge-sharing sessions and other Product Security engagement activities.\nSupport continuous improvement of the Product Security program through process enhancements, metrics and stakeholder feedback.\nBuild strong relationships with technical and non-technical stakeholders, and influence security adoption without direct authority.\nManage multiple priorities across several product teams.\nRequired qualifications\n5+ years of information security experience, including at least 4 years of hands-on application or product security work, or equivalent experience gained through work, training, military service or education.\nHands-on experience defining security requirements, performing security risk assessments and applying a secure SDLC.\nExperience performing or reviewing threat models.\nStrong knowledge of the OWASP Top 10, CWE Top 25, and common software vulnerabilities and their remediation.\nExperience using SAST, DAST and/or SCA tools and validating their findings.\nWorking knowledge of at least one of C/C++, Java, Python or JavaScript, with the ability to read code to confirm and explain issues.\nExcellent communication, stakeholder management and consulting skills, and strong analytical and problem-solving abilities.\nPreferred qualifications\nExperience securing embedded, IoT or Linux-based devices, including secure boot, firmware signing and update mechanisms.\nExperience with PSIRT operations, coordinated vulnerability disclosure, CVE and CVSS.\nKnowledge of applied cryptography and PKI, including awareness of post-quantum cryptography migration.\nFamiliarity with the EU Cyber Resilience Act, FedRAMP, Common Criteria, FIPS 140-3 or similar programs.\nCloud security experience (for example, AWS or Azure).\nPenetration testing, fuzzing or reverse engineering experience.\nRelevant certifications such as CSSLP, GIAC (GWEB, GSSP), OSCP or CISSP.\nBachelor’s degree in computer science, Computer Engineering, Cybersecurity or a related field, or equivalent experience.","description_format":"text","description_chars":5294,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Document Management","Application Security","Printers & Scanners","Managed Print Services"],"lifecycle":[{"event":"open","at":"2026-10-19T15:13:48Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":16,"reasons":["conf:2","win:early","comp:brand"],"computed_at":"2026-10-20T05:06:53Z"},"pay":null,"html_url":"https://alion.io/job/xerox-product-security-engineer","json_url":"https://alion.io/job/xerox-product-security-engineer.json","meta":{"generated_at":"2026-10-20T05:06:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5687,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":63913},"rest":"https://alion.io/mcp/rest/get_company?id=63913"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fxerox-product-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fxerox-product-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fxerox-product-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/xerox-product-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fxerox-product-security-engineer"}]}