Senior Product Security Engineer

Position Overview

ConnectWise is seeking a Senior Product Security Engineer to join our team. This role is responsible for designing and implementing security best practices throughout the system development lifecycle, from design to production. The Senior Product Security Engineer will partner with cross-functional teams, acting as a security subject matter expert to support and enhance the security of ConnectWise applications.

Company Information

ConnectWise is an industry and Global leading software company with over 3,000 colleagues in North America, EMEA, and APAC. We are a community-driven software company dedicated to the success of technology solution providers. Our suite helps over 45,000 partners manage their businesses better, sell more efficiently, automate service delivery, and remotely control technology to deliver amazing customer experiences.

Our company is powered by our connections, our colleagues, and our community. We embrace diversity and value every colleague for their unique contributions. Our inclusive, positive culture ensures every colleague is valued for their perspectives and skills, giving you the choice of how YOU make a difference.

Requirements

• Experience: 5 Years to 10 Years
• Relevant Experience: 3 Years
• Mandatory Skills:
  • Programming skills in Dot Net, Java, Go (Any Skill is fine)
  • Penetration & Security testing is a must.
• Skills/Abilities:
  • Ability to manage projects and processes independently with limited supervision.
  • Recognized subject matter expert of applicable work area.
  • Ability to situationally adapt.

Responsibilities

• Provides support to cross-functional teams with a high attention to detail.
• Researches, analyzes, and documents findings.
• May coach, review, and/or delegate work to other team members.
• Conducts security assessments, threat modeling, and vulnerability reporting.
• Develops security architecture patterns for implementing new solutions and products.
• Performs application security reviews for products and services to identify and/or validate vulnerabilities and attack chains.
• Communicates findings, attack paths, and recommendations to technical and executive stakeholders through written reports and verbal presentations.
• Develops and maintains methodologies for penetration testing.
• Assists with decision-making, prioritization, and support throughout the secure software development life cycle (s-SDLC) on a variety of security domains.
• Participates in requirements gathering, secure coding and configuration, software testing, and third-party component management and defect management.
• Serves as a point of contact on secure development and security best practices.
• Consults cross-functionally to embed security gates into existing SDLCs, leveraging automation when possible.
• Drives the development of standards, practices, and processes to establish, manage, and report adherence to application security requirements and best practices.
• Attends regular stand-ups and planning meetings to build positive relationships with key stakeholders.
• Serves as the security authority on assigned products, ensuring security controls are functioning, security requirements are provided before coding begins, and that vulnerabilities are fixed within their SLAs.
• Ensures s-SDLC controls are embedded in assigned products and serves as control owner for a subset of these controls.
• Engages in application and domain-specific threat modeling, as well as attack surface analysis and reduction.

Work Details

• Work locations: Pune, Mumbai, Bangalore (Hybrid) and also complete Remote option available.
• Work Type: Hybrid and Remote
• Salary: (Not specified)
• Location Type: (Not specified)
• Employment Type: (Not specified)

Application Instructions

(No specific application instructions were provided in the original text.)