Job Description

Job Title: Open Source Security Engineer – Python Development

Company Domain: Cybersecurity / Software Development

Years of Experience: 2+ years

Location: Bangalore, India

Role Type: Full-Time

Salary: To be disclosed based on experience and company policy

Eligibility:

• Minimum 2 years of experience in software development
• Strong hands-on experience in Python development (Primary skill)
• Notice period: Immediate to 45 days
• Willingness to work in a cross-functional, global team environment

Role Overview:

We are seeking a highly motivated Open Source Security Engineer with strong Python development skills to help secure our software ecosystem. You’ll be responsible for identifying and remediating vulnerabilities in open-source components, collaborating with engineering and product teams, and contributing to secure development practices across the organization. This is a key role that bridges software development and cybersecurity, requiring both hands-on coding and deep security insights.

Key Responsibilities:

• Analyze and remediate security vulnerabilities in open-source components
• Implement code changes to fix identified security issues
• Conduct security reviews of internally developed applications, emphasizing secure coding practices
• Evaluate and assess third-party and open-source libraries for potential security risks
• Provide actionable security recommendations to product and engineering teams
• Collaborate across security, product, and engineering teams to reduce risk
• Document vulnerabilities, mitigation strategies, and keep stakeholders updated
• Contribute to secure code deployment using CI/CD tools and pipelines

Must-Have Skills:

• Python development experience (main skillset)
• Proficiency in multiple programming languages (C++, JavaScript, Golang, Java)
• Experience with build tools: Make, Maven/Gradle, Bazel, ANT
• Experience with package managers: Maven, PIP, NPM, etc.
• Strong understanding of open-source security, CVE, and vulnerability management
• Familiarity with vulnerability assessment tools and methodologies
• Experience using Git, including GitHub PR flow and/or Gerrit Patch set flow
• Hands-on experience with CI/CD tools (Jenkins, CircleCI, etc.)
• Exposure to microservices, Docker, and Kubernetes
• Strong ability to work independently and collaborate across global teams
• Ability to prioritize and execute with minimal oversight
• Strong communication skills to explain complex security concepts to varied audiences

Value-Add Skills:

• Experience in building and shipping secure code
• Familiarity with secure software development lifecycle (SSDLC) practices