Staff Product Security Engineer

About this role

Not quite right? These jobs in Bengaluru match the same skills — apply to a few to improve your chances.

Software engineer - Python Validation

Sandisk

In OfficeBengaluru

Apply

Software engineer - AI-Enabled Python Validation

Sandisk

In OfficeBengaluru

Apply

Software Engineering Lead

Airbound

In OfficeBengaluru

Apply

Quality Engineering Manager - FlashArray

Everpure

In OfficeBengaluru

Apply

Skills you'll use

What you'll do

• Product & Firmware Security
• Assess hardware and firmware architectures from both defensive and attacker perspectives.
• Perform threat modeling and security risk assessments across embedded-system architectures.
• Evaluate security mechanisms including secure boot, roots of trust, firmware update and recovery, cryptography and key management, authentication, anti-rollback, provisioning, lifecycle controls, and debug/manufacturing interfaces.
• Identify attack paths and control gaps and work with engineering teams to develop practical mitigations.
• Support security readiness assessments and review security evidence including static analysis, SBOM/dependency analysis, fuzzing, penetration testing, and security validation results.
• Adversarial Security Engineering
• Perform hands-on adversarial assessments of firmware and embedded products.
• Conduct firmware extraction, binary analysis, reverse engineering, vulnerability research, fuzzing, and runtime analysis.
• Analyze boot flows, firmware update mechanisms, trust boundaries, device interfaces, and security-critical components.

Who can apply

• Develop and validate attack hypotheses and proof-of-concept techniques to determine realistic exploitability.
• Analyze interfaces such as JTAG, UART, SPI, PCIe, and NVMe where applicable.
• Correlate findings across static analysis, reverse engineering, fuzzing, runtime analysis, and architecture review to identify multi-stage attack chains.
• Develop reusable adversarial testing tools, automation, and security playbooks.
• Develop AI-assisted workflows for firmware analysis, threat modeling, vulnerability discovery, fuzzing, and security triage.
• Integrate LLMs with security tools, APIs, scripts, and analysis systems to automate security engineering workflows.
• Develop agentic workflows capable of invoking tools, analyzing results, developing attack hypotheses, and recommending subsequent testing.
• Ensure AI-generated security findings are validated through reproducible technical testing and appropriate human review.

About Sandisk

Searching for “Sandisk jobs” or “jobs at Sandisk”? You’re in the right place.