At OneSpan , we specialize in digital identity and anti-fraud solutions that create exceptional and secure experiences.

We are looking for a Senior Security Engineer / Lead (Product Security / Application Security) to join our team in Noida.

At OneSpan, we are embracing the AI transformation to accelerate innovation and productivity across the company. As part of the Security Competence Center (SCC), you will work closely with engineering, product, and business teams to ensure AI is adopted safely, responsibly, and effectively while continuously improving the security of our products and development processes.

The role in 1 sentence: You will help drive our transformation by building AI agents and automation solutions, enabling teams to deliver more, move faster, and innovate securely through a strong shift-left security mindset.

Key Responsibilities

• Conduct application security assessments, including secure code reviews and security testing.
• Secure and Develop AI-powered workflows using LLMs, agent frameworks, orchestration platforms, and enterprise integrations.
• Perform threat modeling activities and support development teams in mitigating identified risks.
• Perform penetration tests on our product before they are publicly released.
• Manage and triage vulnerabilities discovered through SAST, DAST, SCA, penetration tests, and cloud security assessments.
• Collaborate with engineering teams to integrate security controls into CI/CD pipelines and development workflows.
• Support incident response investigations related to product security issues.
• Contribute to the definition and maintenance of security standards, policies, and secure development guidelines.
• Provide security guidance and training to developers and Security Champions.
• Evaluate and recommend security tools, technologies, and processes to improve product security maturity.
• Ensure our products follow all the regulations that apply.
• Track security metrics, risks, and remediation efforts across products and services.

Qualifications

• Bachelor's degree in computer science, Cybersecurity, Software Engineering, or a related field, or equivalent practical experience.
• Experience in application security, cloud security, penetration testing, or secure software development.