Analyst - Product Security

Location: Bengaluru, KA

Time Type: Full time

Job Description

• Support the integration of cybersecurity requirements into the design, development, change management, and maintenance activities of assigned products and platforms.
• Perform product-focused security analysis, including threat modeling, vulnerability assessments, and cybersecurity risk evaluations for software, hardware, APIs, and connected systems.
• Support the implementation, validation, and monitoring of technical security controls in alignment with secure development and product security requirements.
• Assess product changes, newly identified vulnerabilities, software updates, and deviations from a product-specific cybersecurity perspective, and support remediation activities where required.
• Utilize established procedures and security workflows to perform routine product security activities, including tracking findings, maintaining records, and supporting compliance and health monitoring processes for assigned products.
• Maintain up-to-date knowledge of emerging cybersecurity threats, security technologies, software and hardware vulnerabilities, secure engineering practices, and evolving threat vectors relevant to product security.
• Assist in the development and enhancement of security automation use cases, scripts, and tooling to improve the efficiency and effectiveness of product security assessments and monitoring activities.
• Maintain and support product-level cybersecurity documentation, including risk assessments, threat models, security requirements, test evidence, and regulatory or audit-related records for assigned products.
• Support post-market cybersecurity activities for assigned products, including vulnerability monitoring, incident analysis, remediation coordination, and cybersecurity issue tracking where product expertise is required.
• Participate in cross-functional security and product initiatives, collaborating with Engineering, Quality, Regulatory, DevOps, and other stakeholders to address cybersecurity requirements and risks.
• Act as a technical point of contact for cybersecurity-related activities within assigned product teams, supporting issue resolution, security reviews, and ongoing compliance efforts.
• Ensure compliance with the Code of Business Conduct, organizational cybersecurity policies, secure development standards, and all applicable local, state, federal, and industry regulations.
• Participate in recurring operational, project, and governance meetings to support effective coordination, knowledge sharing, issue tracking, and continuity of product cybersecurity activities.