Lead application and product security initiatives, including secure code reviews, threat modeling, penetration testing, vulnerability triage, AI workflow security, CI/CD security integration, incident response, developer training, compliance, and security metrics. The role partners with engineering and product teams to strengthen secure development practices and safely adopt AI technologies.
At OneSpan, we specialize in digital identity and anti-fraud solutions that create exceptional and secure experiences.
We are looking for a Senior Security Engineer / Lead (Product Security / Application Security) to join our team in Noida.
At OneSpan, we are embracing the AI transformation to accelerate innovation and productivity across the company. As part of the Security Competence Center (SCC), you will work closely with engineering, product, and business teams to ensure AI is adopted safely, responsibly, and effectively while continuously improving the security of our products and development processes.
The role in 1 sentence: You will help drive our transformation by building AI agents and automation solutions, enabling teams to deliver more, move faster, and innovate securely through a strong shift-left security mindset.
Key Responsibilities
- Conduct application security assessments, including secure code reviews and security testing.
- Secure and Develop AI-powered workflows using LLMs, agent frameworks, orchestration platforms, and enterprise integrations.
- Perform threat modeling activities and support development teams in mitigating identified risks.
- Perform penetration tests on our product before they are publicly released.
- Manage and triage vulnerabilities discovered through SAST, DAST, SCA, penetration tests, and cloud security assessments.
- Collaborate with engineering teams to integrate security controls into CI/CD pipelines and development workflows.
- Support incident response investigations related to product security issues.
- Contribute to the definition and maintenance of security standards, policies, and secure development guidelines.
- Provide security guidance and training to developers and Security Champions.
- Evaluate and recommend security tools, technologies, and processes to improve product security maturity.
- Ensure our products follow all the regulations that apply.
- Track security metrics, risks, and remediation efforts across products and services.
Qualifications
- Bachelor's degree in computer science, Cybersecurity, Software Engineering, or a related field, or equivalent practical experience.
- Experience in application security, cloud security, penetration testing, or secure software development.
- Strong understanding of common application vulnerabilities (OWASP Top 10, CWE) and secure coding practices.
- Familiarity with security testing tools and methodologies, including SAST, DAST, SCA, and penetration testing.
- Knowledge of modern software development practices, CI/CD pipelines, and cloud environments.
Who are you?
To be successful in this role, this is the kind of pro
- Strong analytical and problem-solving skills.
- Craftsman mindset.
- Excellent communication skills with the ability to work effectively across technical and non-technical teams.
- of experience in application security, mobile security, reverse engineering, or penetration testing.
- Experience with scripting or programming
Nice to have:
- Relevant security certifications such as OSCP, OSWE, SANS GPEN, CISSP or similar.
- Experience with cloud platforms such as AWS, Azure, or GCP.
- AI/ML Security Knowledge.
- Knowledge of cryptography, mobile security, authentication, identity management, and secure architecture principles.
- Experience working in regulated environments or security-focused organizations.
#LI-Onsite
#LI-LS1
Similar Jobs
Artificial Intelligence • Information Technology • Software • Automation
Own and build large, data-intensive frontend features for an observability platform using React and TypeScript. Design complex workflows across dashboards, traces, logs, metrics, and alerts; optimize UI performance with virtualization, caching, and selective rendering; profile slow interactions; contribute to frontend architecture, design system, and cross-functional product decisions.
Top Skills:
Browser Profiling ToolsProgressive LoadingReactSelective RenderingSmart CachingTypescriptVirtualization
Artificial Intelligence • Digital Media • Information Technology • Software
Design and build high-performance, scalable web applications using React, Next.js, and TypeScript. Deliver responsive, pixel-perfect UIs, integrate REST APIs, optimize performance, debug complex issues, maintain testable high-quality code, contribute to architecture, and collaborate with product and design. Work across the stack when needed; backend Python experience is a plus.
Top Skills:
CSS3HTML5JavaScriptNext.JsPythonReactRest ApisTypescript
Artificial Intelligence • Hardware • Automation • Manufacturing
Design and develop scalable, secure frontend web applications for connected embedded systems. Lead frontend architecture, collaborate with backend/embedded teams, implement device provisioning, telemetry visualization, and remote management UIs. Optimize performance, accessibility, and maintainability; mentor engineers, participate in reviews, and drive frontend best practices.
Top Skills:
AngularAWSAzureBabelCSS3D3.JsEmberGCPGitHTML5JavaScriptReactReact RouterReduxRestful ApisTypescriptVueWebpack
What you need to know about the Pune Tech Scene
Once a far-out concept, AI is now a tangible force reshaping industries and economies worldwide. While its adoption will automate some roles, AI has created more jobs than it has displaced, with an expected 97 million new roles to be created in the coming years. This is especially true in cities like Pune, which is emerging as a hub for companies eager to leverage this technology to develop solutions that simplify and improve lives in sectors such as education, healthcare, finance, e-commerce and more.
