Senior Product Security Engineer
About this job
Arrive is a leading global mobility platform that transforms urban mobility and guides customers towards more livable cities through brands like EasyPark, Flowbird, RingGo, ParkMobile, and Parkopedia. As a Senior Product Security Engineer based in Bengaluru, you will play a crucial role in strengthening the security posture of the company's applications and cloud-native platforms. Your work will directly support secure development practices and product security maturity on a global team. A normal day in this role involves conducting manual and automated penetration testing for web applications and APIs, performing threat modeling, reviewing code, assessing cloud configurations, prioritizing vulnerabilities, and collaborating cross-functionally with DevOps and engineering teams to provide actionable remediation guidance and ensure robust application security.
Responsibilities
- Conduct manual and automated penetration testing of web applications and APIs.
- Perform threat modeling for new features and services and conduct secure code reviews.
- Assess AWS, Azure, and GCP configurations, IAM policies, and container security posture.
- Prioritize vulnerabilities using CVSS and business impact context while tracking remediation SLAs.
- Develop scripts and tooling using Python or Bash to automate testing workflows.
- Prepare high-quality technical reports and translate technical findings into business-impact language.
- Work cross-functionally with DevOps, Cloud, and Engineering teams.
Requirements
- 6 to 9 years of experience in Application Security, Product Security, or Offensive Security.
- Hands-on experience conducting web and API penetration testing.
- Strong understanding of OWASP Top 10 and common attack vectors.
- Experience using tools like Burp Suite, OWASP ZAP, Nmap, Snyk, and Checkmarks.
- Experience working with cloud platforms such as AWS, Azure, or GCP.
- Familiarity with container security and modern DevOps environments.
- Strong understanding of HTTP, authentication mechanisms, and networking fundamentals.
- Basic scripting experience in Python, Bash, or similar languages.
Good to have
- Experience in SaaS, fintech, or product-based organizations.
- Exposure to Kubernetes and container security testing.
- Familiarity with bug bounty or responsible disclosure programs.
- Experience implementing DevSecOps practices.
- Certifications such as CEH, Security+, eJPT, or OSCP.
Who should apply
This role suits experienced security professionals with a strong background in offensive security, application security, and product security who want to shape the security posture of a global mobility platform. Candidates must meet the 6 to 9 years experience requirement. Freshers are not eligible to apply for this senior position.
Frequently asked questions
What is the primary location for the Senior Product Security Engineer role at Arrive?
The Senior Product Security Engineer position at Arrive is based in Bengaluru.
What core duties does a Senior Product Security Engineer handle at Arrive?
The role involves penetration testing, threat modeling, secure code reviews, cloud configuration assessments, vulnerability management, and cross-functional collaboration with engineering teams.
How many years of experience are required for the Senior Product Security Engineer opening at Arrive?
Applicants need 6 to 9 years of experience in Application Security, Product Security, or Offensive Security.
What tools and technologies should you know for the Senior Product Security Engineer position at Arrive?
Candidates should have experience with tools like Burp Suite, OWASP ZAP, Nmap, Snyk, and Checkmarks, alongside cloud platforms and basic scripting in Python or Bash.
Rojgar Point lists this job for information. Always apply on the official company page and never pay anyone for a job.