Job Description & Scope
Job description As part of our world-class engineering team at Tekion, we are expanding our Product Security Engineering function . Our dev teams work across a variety of cutting-edge tech stacks in a fast-moving environment, which makes security both a challenge and an opportunity to innovate. We prioritize guardrails over roadblocks in our security culture, empowering developers to move fast while ensuring that security is built-in, scalable, and resilient. The Product Security team is responsible for integrating security into all phases of the SDLC from design through deployment including infrastructure and application security, secure development practices, threat modeling, and DevSecOps automation. Our mission includes: Driving secure-by-design principles across web, mobile, cloud, and IoT systems. Building and maintaining security automation tools for CI/CD pipelines. Enhancing our cloud infrastructure security posture at scale. Developing secure coding patterns, libraries, and guardrails for developers. Partnering with dev teams to identify and remediate security risks early ( shift-left mindset). Conducting architectural reviews and risk assessments for new features or products. Assist engineering teams in performing threat modeling and working with them for effective mitigation techniques. What we re looking for: We value diverse security backgrounds and want to work with professionals who are passionate about engineering secure systems at scale. Required Skills: Strong understanding of information security fundamentals and the ability to communicate them clearly to engineering and product teams. Hands-on experience with secure coding, DevSecOps, and security automation . Familiarity with application architecture, threat modeling, CI/CD pipelines, infrastructure-as-code (IAC), serverless, IAM, and cloud-native security. Experience integrating security controls into developer workflows. Penetration testing is optional and good to have. However, ability to interpret results is a must. Comfortable collaborating across teams and challenging assumptions constructively. Solution-oriented, pragmatic, and focused on scalable risk mitigation. Proficiency in at least one programming language (Python, Bash, Java, etc.) for tool development and automation. Role: Application Security Engineer Industry Type: IT Services & Consulting Department: IT & Information Security Employment Type: Full Time, Permanent Role Category: IT Security Education UG: Any Graduate PG: Any Postgraduate Key Skills AutomationCodingInformation securityMachine learningEngineering ManagerApplication securitySDLCAutomotivePythonPenetration testing
