Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Product Security Engineer

Home > Java programming jobs

Product Security Engineer in Others new

  • Hitachi, Ltd.
  • Full time
  • Email
  • Pune, India

Responsibilities

  • Act as the primary product security contact for Engineering, Product, and Support teams and assess product architecture, technology stacks, APIs, integrations, and deployment models.
  • Perform vulnerability triage, reproduction, validation, risk assessment, prioritization, remediation tracking, reporting, and root cause analysis.
  • Lead vulnerability management across SAST, DAST, SCA, penetration tests, bug bounty programs, and customer-reported issues.
  • Establish remediation SLAs, track findings through closure, validate fixes, and drive corrective actions.
  • Promote Secure SDLC and secure coding practices across Java, Python, Node.js, .NET, and cloud-native applications.
  • Conduct code reviews, develop security standards, validate fixes, and guide engineering teams on sustainable remediation.
  • Integrate security controls and scanning tools into CI/CD pipelines, automate security validation, and support shift-left security practices.
  • Support security implementation across Kubernetes, Docker, containers, infrastructure as code, and cloud-native deployment pipelines.
  • Investigate and remediate product security incidents and collaborate with Engineering, Cloud Operations, Support, and Security teams during incident response.
  • Support SOC 2, ISO 27001, NIST, CIS, customer security assessments, audits, evidence collection, remediation tracking, and security documentation.
  • Serve as a product security subject matter expert, mentor teams, and deliver security awareness and secure coding training.

Requirements

  • 8+ years of experience in Application Security, Product Security, Cybersecurity, DevSecOps, or Software Engineering.
  • Strong knowledge of OWASP Top 10, CWE, CVSS, secure coding, vulnerability assessment, security triage, remediation, and risk analysis.
  • Understanding of enterprise architectures, APIs, microservices, distributed systems, SaaS, OAuth, OIDC, SAML, and IAM.
  • Hands-on experience with Black Duck, Black Duck SRM, AppScan, Qualys, SonarQube, Burp Suite, and dependency scanning tools.
  • Familiarity with Kubernetes, Docker, CI/CD security, DevSecOps, AWS, Azure, container security, and cloud-native environments.
  • Proven vulnerability remediation experience with strong analytical, troubleshooting, and cross-functional collaboration skills.
  • Preferred certifications include CISSP, CSSLP, Security+, GIAC, CCSP, AWS Security, or Azure Security.

Benefits

  • Industry-leading benefits, support, and services focused on holistic health and wellbeing.
  • Flexible work arrangements may be available depending on the role and location.
  • Inclusive, equal-opportunity workplace with reasonable accommodations available during the recruitment process.

Hitachi, Ltd.

Hitachi, Ltd. builds industrial, energy, rail, and digital systems for governments and enterprises, combining operational technology with IT, cloud, and data infrastructure services. Its portfolio spans power grids, factory automation, data centers, rail systems, and consulting delivered through ...

Similar positions

Principal Software Engineer

  • MITRE
  • Full time
  • USA
  • 11/11/2026
  • Salary: $173k - $260k/yr
  • McLean, VA

DevSecOps Engineer

  • Dark Wolf Solutions
  • Full time
  • USA
  • 11/11/2026
  • Colorado Springs, CO

Junior Software Engineer/Consultant

  • Netcompany
  • Full time
  • Remote
  • 11/11/2026
  • Salary: Competitive
  • Greece

Senior Software Engineer

  • ServiceNow
  • Full time
  • USA
  • 11/10/2026
  • Salary: $143k - $243k/yr
  • Santa Clara, CA

Senior Application Security Engineer

  • Clear Capital | CubiCasa | restb.ai
  • Full time
  • USA
  • 11/10/2026
  • Salary: $111k-$144k
  • Remote