Product Security Engineer

HugoHub

. Design and conduct comprehensive threat modeling sessions for new features and system architectures .

Posted 11/7/2026full-timeHyderabad • IndiaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in threat modeling, security testing, and vulnerability assessment, with a strong focus on integrating security practices within development workflows. Proficient in implementing security automation and maintaining security metrics to enhance product security.

Highest-signal resume keywords

Threat ModelingWeb Application Security TestingDevSecOps PracticesSAST ToolsSecurity Automation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat ModelingSecurity TestingVulnerability AssessmentSecurity AutomationSASTDASTPythonBashContainer SecurityInfrastructure as Code Security

Soft Skills

CollaborationCommunicationEducation

Tools & Technologies

AWSDockerKubernetesTerraformCloudFormation

Certifications & Qualifications

NISTISO 27001SOC 2PCI DSSGDPR

Industry Keywords

Product SecurityApplication SecurityCybersecuritySecurity FrameworksBug Bounty Programs

Tech Stack

Tools & technologies

AndroidAWSCloudCyber SecurityDockeriOSKubernetesPythonTerraform

About the role

Key responsibilities & impact

Design and conduct comprehensive threat modeling sessions for new features and system architectures
Identify potential attack vectors and security vulnerabilities early in the development process
Collaborate with product and engineering teams to prioritize security requirements based on risk assessment
Develop and maintain threat models for existing and new products
Perform security testing of web applications, mobile applications, and APIs
Conduct static and dynamic application security testing
Execute penetration testing and vulnerability assessments
Review code for security vulnerabilities and provide remediation guidance
Validate security controls and defensive measures
Implement and maintain SAST tools in CI/CD pipelines
Deploy and optimize DAST solutions
Establish cloud security best practices and tooling for AWS environments
Build security gates and quality checks into development workflows
Collaborate with DevOps teams to secure infrastructure as code
Develop automated security testing frameworks and scripts
Build tools and integrations to streamline security processes
Automate vulnerability scanning and reporting workflows
Create self-service security tools for development teams
Implement security orchestration and response automation
Design and implement security metrics and KPIs for product security
Analyze security testing results and trends to identify systemic issues
Build dashboards and reporting for security posture visibility
Conduct security data analysis to inform strategic decisions
Monitor and respond to security alerts and incidents
Partner with engineering teams to provide security guidance and support
Educate developers on secure coding practices and security requirements
Work with product managers to balance security and business requirements
Collaborate with infrastructure and platform teams on security architecture

Requirements

What you’ll need

5+ years of experience in product security, application security, or related cybersecurity roles
Strong background in threat modeling and secure design review
Extensive experience with web application security testing and mobile application security for iOS and Android platforms
Hands-on experience with DevSecOps practices and security tool integration
Proficiency with SAST, DAST, Cloud Security tools
Experience with security automation and scripting (Python, Bash)
Background in security analytics and data analysis for security insights
Experience with container security (Docker, Kubernetes) preferred
Knowledge of infrastructure as code security (Terraform, CloudFormation) preferred
Familiarity with security frameworks (NIST, ISO 27001, SOC 2) preferred
Experience with bug bounty programs and responsible disclosure preferred
Experience with compliance requirements (PCI DSS, GDPR) preferred