Product Security Engineer

About this job

At Precisely International Jobs, you will join the global Product Security team to test products like an attacker, uncovering exploitable risks across web applications, APIs, containers, cloud environments, and AI-enabled features. Precisely is an AI-first organization and global leader in data quality, data enrichment, and location intelligence, helping trusted brands make confident decisions with reliable data. A normal day involves performing hands-on security testing, contributing to threat modeling and secure design reviews, evaluating identity and access control models, and collaborating closely with engineering and product teams to remediate vulnerabilities. You will build rapid professional breadth while helping design and ship secure software as part of an innovative, curious team.

Responsibilities

• Perform hands-on security testing across web applications, APIs, containers, cloud environments, and AI-enabled features.
• Prioritize findings by exploitability and business impact and track them through to verified remediation.
• Contribute to threat modeling, secure design reviews, and architecture discussions early in development.
• Assess identity and access control weaknesses, authentication models, and cloud architectures for misconfigurations.
• Test AI-enabled features and agentic workflows for prompt injection, tool misuse, and AI failure modes.
• Partner with engineering and product teams to explain findings clearly and support secure development practices.
• Research emerging attack techniques and AI-assisted testing tools to improve testing coverage and speed.

Requirements

• Bachelor's degree in Computer Science, Information Security or related field, or equivalent practical experience.
• 3+ years of experience performing penetration testing or application security.
• Experience testing across web applications, APIs, containerized deployments, and multi-cloud environments.
• Demonstrable expertise with tools such as Burp Suite, OWASP ZAP, Postman, Git, and Python.
• Strong understanding of the OWASP Top 10, OWASP Top 10 for LLM Applications, SANS, and MITRE ATT&CK.
• Experience validating vulnerabilities through manual testing and distinguishing real risk from raw scanner output.
• Familiarity with security risks in AI-enabled features like prompt injection and insecure model integrations.

Good to have

• Experience with threat modeling and secure design reviews.
• Familiarity with cloud security concepts and common risks in modern application environments.
• Experience testing APIs, desktop applications, or legacy and mainframe systems.
• Relevant security certifications such as OSCP, PNPT, GPEN, GWAPT, CEH, or CompTIA Security+.
• Background in software engineering.

Who should apply

This role suits experienced security professionals with a background in application security or penetration testing who want to work at the intersection of AI and data security. Candidates must have at least 3 years of relevant experience, making this position unsuitable for freshers unless they possess equivalent practical expertise. If you enjoy hands-on hacking, threat modeling, testing AI systems, and collaborating with developers to secure global software products, this position at Precisely International Jobs is an ideal fit.

Frequently asked questions