Product Security Engineer

Role Proficiency Develops applications and participates in maintenance Reuses proven solutions contributes to research and development activities with some guidance from Product Engineer I Outcomes Understand product requirements and user stories from customer discovery process Ensure requirements coverage of complex features with unit test cases Troubleshoots development and production problems across multiple environments and operating platforms Ensure code coverage and code quality by actively participating in code reviews Ensure adherence to best practices and standards with provision of periodic status updates Execute test cases and prepare release documents in line with the requirements Improve customer satisfaction Measures of Outcomes 100 adherence to engineering process and standards coding standards with minimal or no code review comments w r t given guidelines 100 adherence to project schedule timelines and effort estimation Number of technical issues uncovered during the execution of the project Number of code defects Number of defects post delivery Number of non-compliance issues Quarterly timely completion of mandatory domain technical certifications Outputs Expected Product Requirements Understand the functional non-functional requirements gathered from the stakeholders Architect Product Manager Product Lead Client for enhancement Seek review inputs from the Architect Leads and incorporate same Product Design and Development Contribute to product development following SLA and delivery timelines Create POCs to identify the feasibility of new technologies products share the findings with the architecture team for new products Seek review inputs from the product specialist Build code per the design document ensuring compliance on defined standards guidelines Support the client in user acceptance testing if required Ensure code quality and 100 code coverage Product Testing Review Test Cases Test Plan conduct integration testing and resolve defects bugs Product Training and Documentation Provide inputs to technical publications and review documentation of key features as required Product Sign Offs Resolve existing issues Project Management Provide inputs on the status of the module development to the development lead Skills Certifications Upskill regularly with timely completion of mandatory domain technical certifications Skill Examples Ability to use Domain Industry Knowledge to independently understand capture the business requirements and fine-tune interacting with SME at various stages of the development Ability to use Product Design knowledge to design and implement the business and non-functional requirements Ability to use knowledge of Product Features Functionality to understand the technical dependency of the product workflow independently analyzing the product applying the best practices in own area of work and impart training on the various functional modules of the product Ability to design install configure troubleshoot CI CD pipelines Ability to use Software Design Development knowledge to develop code as per the requirement specifications and user stories Understand and follow engineering practices take technical responsibility for all stages in the software development process and review process to ensure all practices are being followed Ability to use UX Knowledge to understand user interface design with the implications on product design and development while improving product usability across the user base Provide necessary inputs to design team that indicates the user profile segments and savviness of these users so that right trade-off can be achieved Knowledge Examples Domain Industry Knowledge Working knowledge of standard business processes within the relevant industry vertical and customer business domain Product Design Working knowledge of product architecture elements such as client server SOA based configuration parameters may specialize in one or more areas Product Features Functionality Working knowledge of the product Knowledge of Config Build Deploy processes and tools Knowledge of IAAS - Cloud providers AWS Azure Google etc and their tool sets Knowledge of the application development lifecycle - agile and waterfall Knowledge of Quality Assurance processes Knowledge of Quality Automation processes and tools User Experience Knowledge Basic knowledge of aspects that enhance product systems usability and improve the overall user experience Additional Comments A Product Security Engineer focused on tooling will enhance the security posture of the organization by Conducting annual audits for security tools usage to ensure effectiveness and proper triage of findings Assisting product teams with onboarding security tools performing configuration changes and aiding in the review of new tools during POV activities Increasing the ROI on security tooling by identifying common problems and offering unified solutions Conducting regular security assessments and collaborating with cross-functional teams Monitoring and responding to tooling problems Researching and implementing new security technologies Developing and maintaining security metrics with actionable outputs Preferred Qualifications 3-4 years minimum of Security Experience Required Proven experience of working across a wide range of application security programs and tools including SCA SAST DAST and beyond Awareness of OWASP SANS and MITRE ATT CK frameworks Hands-on experience in Containers Windows and Linux OS Experience in Power bi and Tableau dashboards Scripting experience in Python Bash PowerShell preferred Familiarity with all aspects of the software development life cycle Strong communication and interpersonal skills Experience working within an agile scrum team is desirable Must be self-directed resilient and creative Software Engineering background useful Skills Security Engineering Mitre Attack Linux Operating System Sast About Company UST is a global digital transformation solutions provider For more than 20 years UST has worked side by side with the world s best companies to make a real impact through transformation Powered by technology inspired by people and led by purpose UST partners with their clients from design to operation With deep domain expertise and a future-proof philosophy UST embeds innovation and agility into their clients organizations With over 30 000 employees in 30 countries UST builds for boundless impact touching billions of lives in the process