APTIV Logo

APTIV

Senior Engineer - Product Security

Posted One Month Ago
Be an Early Applicant
In-Office
Industrial Area SSI, Rajaji Nagar, Bangalore, Karnataka, IND
Senior level
In-Office
Industrial Area SSI, Rajaji Nagar, Bangalore, Karnataka, IND
Senior level
Secure cloud-native and on-premises infrastructure, applications, APIs, containers, and clusters using AWS, Azure, IaC, and policy as code. Conduct application and API security assessments, penetration testing, vulnerability management, remediation, and troubleshooting. Implement DevSecOps automation through GitLab and Jenkins, use security tools including Coverity, Burp Suite, Trivy, Prisma Cloud, Tenable, and CrowdStrike, and collaborate with engineering, development, QA, and customer-facing teams.
The summary above was generated by AI

ABOUT WIND RIVER  

Wind River is a global leader in delivering software for mission-critical intelligent systems. For more than four decades, the company has been an innovator and pioneer, powering billions of systems that require the highest levels of security, safety, and reliability.   

Wind River helps customers across automotive, aerospace, defense, industrial, medical, and telecommunications industries solve complex technology challenges on their journey toward the new intelligent machine economy. The company’s software powers generation after generation of the safest, most secure systems in the world.  Examples include playing a key role in NASA space missions such as Artemis I, the James Webb Space Telescope, and multiple Mars rovers. We’ve achieved recent 5G milestones including the world’s first successful 5G data session with Verizon and building one of the largest Open RAN networks in the world with Vodafone.  

The company has received industry recognition for its technology innovation and leadership, and for its workplace culture, including global Great Place to Work certification and being named a “Top Workplace” for ten consecutive years. If you want to be part of a unique culture where the lived experience is based on our cultural attributes of growth mindset, customer-focus, and diversity, equity, inclusion & belonging, come join us and help advance the future software defined world.  

  
YOUR ROLE 

As a Security Engineer at Wind River, you will play a pivotal role in our mission. You’ll work closely with Product Engineering, Software Development, QA, and our customer-facing teams to ensure requisite levels of infrastructure, applications, and software security. Collaboration and teamwork are key, as you'll actively participate in global projects, working with colleagues from around the world. Your responsibilities will span from providing secure by-design hybrid infrastructure and security controls implementation for cloud-native solutions. To succeed in this role, you should have 3-5 years of IT security experience, be proficient in public cloud management leveraging IAC, and possess a strong understanding of DevSecOps technologies, pioneering new security tools, processes and capabilities for cloud-native solutions. A proactive mindset, solid technical skills, and the ability to work autonomously are essential.

What You'll Do

  • Deep understanding and hands-on experience in AWS and Azure native services
  • Secure OnPrem and Public Cloud environments leveraging IAC and policy as code
  • Practical hands-on application security, API security and Penetration testing
  • Good understanding of security tools Coverity, BurpSuite, Trivy, Prisma Cloud , Tenable, CrowdStrike etc.
  • Working experience in container and cluster hardening
  • Excellent programming skills using Python
  • Proficiency in pipeline automation leveraging Gitlab, Jenkins, Jira etc.
  • Strong foundation of vulnerability management, remediation, and troubleshooting skills
  • Proactive and adaptable with a willingness to learn

Required Skills

Education & Experience 

  • Bachelor's in Computer Science, Electronics/Electrical Engineering, or related field.
  • you should have 3-5 years of IT security experience, be proficient in public cloud management leveraging IAC, and possess a strong understanding of DevSecOps technologies.

Technical Skills

  • Practical hands-on application security, API security and Penetration testing
  • Good understanding of security tools Coverity, BurpSuite, Trivy, Prisma Cloud , Tenable, CrowdStrike etc.

IT’S WHAT WE OFFER YOU

  • Hybrid work model for workplace flexibility
  • Comprehensive health, dental, and life insurance
  • Short and long-term disability coverage
  • RRSP matching for financial security
  • Flexible time-off policies for work-life balance
  • Employee assistance program for mental well-being
  • Learning benefits, including a LinkedIn Learning subscription and seminars

“Windriver is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, gender identity, sexual orientation, disability status, protected veteran status or any other characteristic protected by law”

#LI-MS5

Privacy Notice - Active Candidates: https://www.aptiv.com/privacy-notice-active-candidates

Aptiv is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, gender identity, sexual orientation, disability status, protected veteran status or any other characteristic protected by law.

APTIV Bengaluru, Karnataka, IND Office

Bengaluru, India

Similar Jobs

One Month Ago
In-Office
Bengaluru, Bengaluru Urban, Karnataka, IND
Senior level
Senior level
Artificial Intelligence • Cloud • Software • Infrastructure as a Service (IaaS)
Design and implement product security controls, secure architecture guardrails, security tools, and developer-focused CI/CD protections. Conduct threat modeling, secure code reviews, holistic security assessments, and AI security risk mitigation. Partner with product and engineering teams across the technology stack, promote secure coding, support security remediation, explain emerging vulnerabilities, and build an internal security culture through training and security exercises.
Top Skills: Ai/Ml PipelinesAWSCi/CdContainersGoogle Cloud PlatformJavaScriptMaestroMitre AtlasOwasp Top 10 For Llms/Agents/McpPHPPythonSemgrepVirtualization
2 Months Ago
In-Office
Bangalore, Bengaluru Urban, Karnataka, IND
Senior level
Senior level
Information Technology • Other • Biotech
Lead security assessments of cloud-hosted applications and APIs, perform threat modeling and architecture reviews, assess identity/access controls, produce assessment reports, guide remediation with engineering, support PSIRT, contribute to standards, and stay current on application and AI security risks.
Top Skills: AgentsAPIsCloud-Hosted ArchitecturesContainersEmbedded SystemsFirmware AnalysisIotJwtLlmsMicroservicesMitre AtlasModel EndpointsNist Ai RmfOauth2OidcOwasp Api Security Top 10Owasp Top 10Owasp Top 10 For Llm ApplicationsPsirtRetrieval Augmented GenerationSAMLStride
2 Months Ago
In-Office
Bengaluru, Bengaluru Urban, Karnataka, IND
Senior level
Senior level
Artificial Intelligence • Cloud • Machine Learning • Security • Software • Cybersecurity • Big Data Analytics
Lead application and product security end-to-end: secure software supply chain, first-party code and container artifacts, harden AI agents, run responsible disclosure and penetration testing, perform threat modeling and secure architecture reviews, and partner with engineering to implement security controls.
Top Skills: Ai AgentsBazelBug Bounty/Responsible DisclosureBuild SystemsCi/CdContainer ImagesContainer ScanningDockerPenetration TestingSoftware Supply Chain Security

What you need to know about the Bengaluru Tech Scene

Dubbed the "Silicon Valley of India," Bengaluru has emerged as the nation's leading hub for information technology and a go-to destination for startups. Home to tech giants like ISRO, Infosys, Wipro and HAL, the city attracts and cultivates a rich pool of tech talent, supported by numerous educational and research institutions including the Indian Institute of Science, Bangalore Institute of Technology, and the International Institute of Information Technology.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account