Quest Global

Engineering services, digital transformation, asset management

Lead Engineer - Product Security Representative

Security Engineering & ArchitectureConfirmed live in the last 24 hours

Full-timeBengaluru, Karnataka, IndiaNo salary listedIn-person

About the Job

Requirements

A bachelor's degree in computer science, information security, or a related field is required.
At least 7 years of full-time information security experience is required.
A good understanding of security architecture is required, including security-control design, secure system design, and identity and authentication management.
Sound understanding of cryptography, algorithms, public key infrastructure, certificate authorities, hardware or embedded authentication, OAuth, two-factor authentication, and white-box code analysis is required.
Experience with security tools for static application security testing, dynamic application security testing, vulnerability management, software composition analysis, penetration testing, and threat modeling is required.
Knowledge of OWASP, CVSS, FIPS 140-2/140-3, and DoD RMF is required.
Experience in a product-sector environment is required.
Experience assessing the security of Kubernetes and microservice-based architectures is required.
A strong understanding of secure coding practices and experience with C++, Java, Go, and Python are required.
Excellent written and verbal communication skills and the ability to communicate security information to technical and non-technical stakeholders are required.
Strong problem-solving and analytical skills, including the ability to think critically and creatively, are required.
The ability to work in a fast-paced, dynamic environment and prioritize and manage multiple tasks and projects is required.
Experience working with Agile is required.
Good communication and presentation skills are required.

Responsibilities

Ensure the security and compliance of software products as the Product Security Representative.
Provide security guidance to product teams and help identify and mitigate security risks during development.
Respond to security incidents, conduct investigations, and communicate findings to relevant stakeholders.
Monitor industry trends and emerging threats and advise product teams on how to address risks.
Communicate security information to customers and other relevant stakeholders.
Collaborate with organizational security teams, including Information Security, to align with the company's overall security strategy.
Respond to audits and work with the Product Security Leader to ensure compliance with applicable regulations and standards, including FIPS, STIG, GDPR, and HIPAA.
Design secure applications and guide secure application design using software design principles.
Model and mitigate security threats to protect personally identifiable information and personal health information transferred using DICOM.
Apply knowledge of HL7 in the healthcare domain.

Desired Qualifications

Experience in the healthcare domain is desirable.
Penetration testing of web applications, thick clients, mobile applications, REST, or SOAP is desirable.
Infrastructure penetration-testing experience is desirable.
Experience in red teaming is an added advantage.
Recognition through a CVE or a bug-bounty Wall of Fame is an added advantage.
Experience developing software applications for medical-device domains, including CT, XR, MR, Common Platform, DICOM, and IHE standards, is desirable.
Cybersecurity certifications such as CISSP, CEH, or similar certifications are desirable.
The ability to explore large codebases and understand architecture and design is desirable.

Job Requirements Company: Quest GlobalJob Category: Med Tech and HealthcareWe are seeking a highly skilled and experienced Product Security Representative to join our team at Quest Global. As a Lead Engineer, you will play a crucial role in product security activities for our Med Tech and Healthcare projects. Roles and Responsibilities: <ul><li>The Product Security Representative (PSR) will be responsible for ensuring the security and compliance of software products</li><li>Provide security guidance to product teams and assist in identifying and mitigating security risks in the development process.</li><li>Respond to security incidents, conduct investigations, and communicate findings to relevant stakeholders.</li><li>Stay current with industry trends and emerging threats and advise product teams on how to address these risks.</li><li>Communicate security information to stakeholders, including customers and other relevant parties.</li><li>Collaborate with other security teams within the organization, such as the Information Security team, to ensure alignment with the overall security strategy of the company.</li><li>Respond to audits and work with the Product Security Leader to ensure compliance with relevant regulations and standards, including FIPS, STIG, GDPR, and HIPAA.</li><li>Design secure applications and provide guidance on secure application design, with a good understanding of software design principles.</li><li>Model security threats and mitigate them to ensure the protection of Personal Identifiable Information (PII) and Personally Health Information (PHI) being transferred using DICOM.</li><li>Possess a strong understanding of HL7 and experience working with it in the healthcare domain.</li></ul> Work Experience Required Skills: <ul><li>Bachelor’s degree in computer science, Information Security, or a related field.</li><li>7+ years full-time information security experience.</li><li>Good understanding of security architecture (design of security controls, secure system design, understanding of identity and authentication management, etc.)</li><li>Sound understanding of security technologies/techniques like Cryptography, Algorithms, Public key Infrastructure (PKI) Certificate Authority (CA), Hardware/embedded authentication, OAuth, 2-factor authentication, white-box code analysis.</li><li>Experience with a range of security tools related to SAST (Static Application Security Assessment), DAST (Dynamic Application Security Assessment), Vulnerability Management, SCA (Software Composition Analysis), Penetration Testing, Threat Modelling Tool</li><li>Firm with knowledge of OWASP, CVSS, FIPS 140-2/140-3 and DoD RMF.</li><li>Experience in working with Product sector environment.</li><li>Experience in handling security assessment of Kubernetes, Microservice based architecture.</li><li>Strong understanding of secure coding practices, including experience with C++, Java, Go and Python</li><li>Excellent communication skills, both written and verbal, and the ability to effectively communicate security information to both technical and non-technical stakeholders.</li><li>Strong problem-solving and analytical skills, and the ability to think critically and creatively.</li><li>Ability to work effectively in a fast-paced and dynamic environment, and to prioritize and manage multiple tasks and projects.</li><li>Experience in working with Agile.</li><li>Good communication and presentation skills.</li></ul>Desired Skills: <ul><li>Experience in Healthcare domain.</li><li>Penetration Testing in Web Application, Thick Client, Mobile Application, REST/SOAP</li><li>Infrastructure Penetration Testing</li><li>Experience in Red Teaming Activities (add on)</li><li>Recognition for CVE or Wall-of-Fame though Bug-Bounty (add on)</li><li>Experience in developing software applications for Medical Devices domain CT, XR, MR, Common Platform, DICOM standard and IHE standards.</li><li>Cybersecurity certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or similar certifications are desirable.</li><li>Ability to explore large code base and understand architecture and design</li></ul>

About the Company

Quest Global

Engineering services, digital transformation, asset management

QuEST Global provides engineering and lifecycle services across aerospace, automotive, energy, healthcare, and transportation, focusing on digital transformation and asset management. It uses edge computing, cloud, AI/ML, and industrial IoT to deliver tailored engineering solutions through long-term partnerships, service contracts, project-based engagements, and strategic collaborations. It differentiates itself with a broad industry footprint, global delivery model, and emphasis on partnerships, talent development, and workplace culture. Its goal is to help clients improve operational efficiency and drive business growth by transforming engineering processes and assets with digital tools and data-driven management.

Company size: 10,001+
Company stage: Growth Equity (Venture Capital)
Total funding: $581M
Headquarters: Greenville, SC
Founded: 1997

Recently Posted Jobs

Explore more opportunities at Quest Global

See more jobs