Product Security Engineer
About this job
As a Product Security Engineer at Harness in Bengaluru, you will play a critical role in safeguarding the company's AI Software Delivery Platform across the entire development lifecycle. Harness is backed by prominent investors and builds automation tools that help global teams ship code faster while maintaining governance and security. A normal day in this full-time role involves handling customer security escalations, reviewing incoming security alerts, and managing vulnerabilities from initial triage all the way through remediation. You will collaborate closely with engineering teams to fix security issues, operate and fine-tune scanners like Semgrep, Snyk, and Prisma Cloud, and integrate vital security checks directly into CI/CD pipelines. Additionally, you will drive the internal adoption of Harness security modules to ensure best practices are maintained across all operations.
Responsibilities
- Manage daily product-security operations, including triaging customer security escalations and investigating alerts.
- Drive vulnerability management from triage to closure in partnership with engineering teams.
- Operate and tune SAST, SCA, and cloud scanning tools like Semgrep, Snyk, and Prisma Cloud.
- Integrate security controls and checks into CI/CD pipelines.
- Drive internal adoption of Harness security modules as a reference for customers.
- Support release security advisories and help review customer-facing vulnerability summaries.
- Establish software supply-chain practices and support periodic penetration tests.
Requirements
- Proven experience in product security, vulnerability management, and secure SDLC practices.
- Hands-on expertise with security tools such as OWASP ZAP, Burp Suite, Snyk, Prisma Cloud, or Semgrep.
- Strong understanding of CI/CD processes, tools, and shift-left security approaches.
- Knowledge of secure coding practices, threat modeling, and supply chain security principles.
- Working knowledge of the OWASP Top 10 and mapping it to real product issues.
- Familiarity with cloud environments like AWS, GCP, or Azure and securing containerized applications.
- Experience scripting or automating security workflows using Python, Go, or similar languages.
Good to have
- Familiarity with AI security concerns in the SDLC and LLM applications.
- Experience with OWASP LLM Top 10 awareness.
- Passion for fostering a security-first culture through training and continuous improvement.
Who should apply
This role suits professionals with a strong background in product security, vulnerability management, and secure software development who enjoy working collaboratively with engineering and DevOps teams. Candidates who are comfortable operating scanning tools, integrating checks into CI/CD pipelines, and automating workflows using languages like Python or Go will find a great fit here. The posting does not mention whether freshers can apply, so applicants should generally possess relevant professional experience in product security.
Frequently asked questions
What is the location for the Product Security Engineer role at Harness?
The Product Security Engineer position is based in Bengaluru, Karnataka, India.
What tools will I use in the Product Security Engineer position at Harness?
You will use security tools such as Semgrep, Snyk, Prisma Cloud, OWASP ZAP, and Burp Suite.
What are the core duties of a Product Security Engineer at Harness?
Core duties include handling daily product-security operations, triaging customer security escalations, managing vulnerabilities, tuning scanners, and integrating security controls into CI/CD pipelines.
Does Harness require experience in cloud environments for this job?
Yes, working knowledge of cloud environments like AWS, GCP, or Azure and securing containerized applications is required.
Rojgar Point lists this job for information. Always apply on the official company page and never pay anyone for a job.