Product Security Engineer

Role Overview:
The Product Security Engineer is a dedicated security advocate embedded within the product development lifecycle, responsible for ensuring that secure design, development, and testing practices are consistently applied. They work closely with development teams during security reviews, triage findings from automated scans (e.g., SAST, SCA, DAST), and drive proactive threat modeling. Additionally, they help plan, coordinate, and support security prioritization efforts and risk communication.
This is a Hybrid position based in Bangalore. You must be within a commutable distance from the location. You will be required to be onsite on an as-needed basis; when not working onsite, you will work remotely from your home location.
Job Description:

About the Role:
• Act as a point of contact for developers during security reviews, offering expert guidance on addressing vulnerabilities and implementing secure coding practices.
• Provide technical mentorship and training to development and QA teams on secure design principles and secure software development lifecycle practices.
• Collaborate with developers and architects to prioritize findings based on exploitability, impact, and business context.
• Advice on secure design patterns and defensive coding practices, embedding security early in the SDLC.
• Drive tooling improvements, integrating static analysis tools more effectively into CI/CD pipelines for speed and accuracy.

About You:
• You should have 5 to 7 years of experience in one (or more) programming languages like Swift / Go / Python or similar object-oriented language.
• You have knowledge of networking protocols such as HTTP, DNS and TCP/ IP.
• You are experienced in analyzing and triaging findings from SAST, SCA and DAST tools and translating them into actionable developer guidance.
• You have a solid understanding of secure coding practices, OWASP Top 10, CWE and modern application architectures like microservices and cloud-native apps.
• You have strong technical knowledge of application security, with hands-on experience in secure software development and security tooling across the SDLC.
• Benefit if you have led or facilitated threat modeling sessions and are confident identifying risks in design and architecture discussions.

#LI- Hybrid

Accommodations:

McAfee recognizes and supports its obligation to reasonably accommodate applicants and employees with disabilities. We are here to help. Please let us know if you need a reasonable accommodation for any part of the application, interviewing, hiring, or at any other time during the employment process. Please do not include personal medical information in the email.

Diversity is foundational for our business success. We want to be a workplace of choice for all people and we value the unique perspectives offered by a diverse workforce. McAfee does not unlawfully discriminate on the basis of race, color, religion, sex, ****** orientation, gender identity or expression, national origin, citizenship, disability, protected veteran status, age, ancestry, medical condition, genetic information, marital status, pregnancy, or any other legally protected status. This principle applies to all areas of employment: recruitment and hiring, training, performance evaluations, promotions and transfers, compensation and benefits, and social and recreational programs.

McAfee desires to be an employer of choice with an inclusive environment for all individuals. As part of this goal and in compliance with various laws and regulations, McAfee provides reasonable accommodation to applicants and employees. Requests for reasonable accommodation for applicants and employees are evaluated on a case-by-case basis.

Posting Statement:

McAfee prohibits discrimination based on race, color, religion, gender, national origin, age, disability, veteran status, marital status, pregnancy, gender expression or identity, ****** orientation or any other legally protected status.