Lead Product Security Engineer
Quest Global · Bengaluru, India
About the role
Lead Product Security Engineer driving SSDLC and security architecture for medical products. Owns threat modeling, security reviews, SAST/DAST, vulnerability management, and secure design guidance across teams.
What you'll do
- Perform threat modeling with STRIDE, PASTA, MITRE ATT&CK
- Conduct security architecture reviews and recommend secure-by-design
- Run SAST, DAST, SCA assessments and vulnerability triage
- Review SBOMs and third-party software risks
- Guide teams on cryptography, IAM, network security
- Participate in security roadmap and governance
What they're looking for
- 8+ years in product/application security
- Threat modeling methodologies (STRIDE, PASTA, MITRE ATT&CK)
- Experience with SAST, DAST, SCA tools
- Secure design and SSDLC knowledge
- Vulnerability management and risk assessment
- Cryptography, IAM, network security knowledge
Key details
- Company
- Quest Global
- Location
- Bengaluru, India
- Work mode
- On-site
- Seniority
- Lead / Principal / Group
- Employment type
- Full-time
- Role category
- Engineering
- Experience
- 8+ years
- Posted
- 28 Sept 2026
- Source
- careers.quest-global.com