Product Security Engineer

DevRev

Bengaluru, Karnataka, IndiaFull-timeNo compensation foundPosted 5mo agoVerified open 3 days ago

Evaluate my fit

Most applications go out cold — see where you stand first. No sign-up to start.

Don't just apply. Show up ready.

Olive works from this exact posting — no sign-up to start.

Evaluate your fitSee where you stand — strengths, gaps, and what to fix first.Get started →Tailor your résuméRewritten against this posting, with a diff of every change.Get started →Practice the interviewA voice mock interview built from this job description.Get started →

At a glance

Compensation

No compensation found

Location

Bengaluru, Karnataka, India

Schedule

Full-time

Work Authorization

Not specified

Job overview

DevRev is hiring a Product Security Engineer. DevRev is seeking a hands-on Product Security Engineer to join their growing security team. This role involves proactively identifying and fixing security vulnerabilities in their SaaS product, working closely with product and engineering teams. The ideal candidate enjoys breaking things responsibly, moving fast, owning problems end-to-end, and thinking like a real attacker.

Key focus areas include Actively test our SaaS product for security vulnerabilities across web apps, APIs, and cloud infrastructure, Perform manual security testing and targeted penetration tests, and Implement and help implement automated security test suites.

Successful candidates bring 8+ Years Application Security Experience, 8+ Years Offensive Security Experience, and 8+ Years Penetration Testing Experience. Important skills include Security Vulnerability Testing, Manual Security Testing, Penetration Testing, Automated Security Test Suites Implementation, Abuse Case Identification, and Business Logic Flaws Identification. Preferred (not required): Startup Experience, Early-Stage Product Exposure, Bug Bounty Experience, and Responsible Disclosure Experience.

Skills & qualifications

RequiredNice to have

Skills

Security Vulnerability TestingManual Security TestingPenetration TestingAutomated Security Test Suites ImplementationAbuse Case IdentificationBusiness Logic Flaws IdentificationReal-World Attack Path IdentificationIssue ReproductionSecurity Practices IntroductionThreat ModelingSecure Design ReviewsFix ValidationVulnerability ResearchAttack Techniques ResearchSaaS-Relevant Threats ResearchWeb SecurityAPI SecurityOWASP Top 10AuthenticationSessionsAccess ControlSaaS Product TestingAWSGCPAzureBurp SuiteNucleiClear CommunicationSelf-Starter MindsetStartup ExperienceEarly-Stage Product ExposureBug Bounty ExperienceResponsible Disclosure ExperienceSecure Code ReviewCI/CD SecurityModern SDLC Security

Qualifications

8+ Years Application Security Experience8+ Years Offensive Security Experience8+ Years Penetration Testing ExperienceOSCP CertificationGWAPT Certification

Full job description

About DevRev

At DevRev, we're building the future of work with Computer – your AI teammate. Unlike traditional tools, Computer unifies all your data sources, tools, and workflows into a single AI-ready platform, giving employees real-time insights, proactive suggestions, and powerful agentic actions. It extends your existing software with AI-native apps and agents that work alongside your teams and customers – updating workflows, coordinating across teams, and eliminating repetitive work. We call this Team Intelligence: human-AI collaboration that breaks down silos, brings people back together, and frees you to solve bigger problems. Backed by Khosla Ventures and Mayfield with $150M+ raised, DevRev is trusted by global companies across industries.

About the Role: We’re a growing SaaS startup building our security team from the ground up. We’re looking for a hands-on Product Security Engineer who enjoys breaking things (responsibly) and helping teams fix them fast.

This role is very practical and impact-driven. You’ll be embedded close to the product and engineering teams, proactively attacking our own systems before anyone else does. If you like moving fast, owning problems end-to-end, and thinking like a real attacker, this role is for you.

What You'll Do:

Actively test our SaaS product for security vulnerabilities across web apps, APIs, and cloud infrastructure.
Perform manual security testing and targeted penetration tests (beyond automated scanners).
Implement and help implement automated security test suites.
Identify abuse cases, business logic flaws, and real-world attack paths.
Work directly with engineers to reproduce issues and drive fixes.
Help introduce lightweight security practices into the development process (threat modeling, secure design reviews).
Validate fixes and ensure issues are fully resolved.
Stay current on new vulnerabilities, attack techniques, and SaaS-relevant threats. What You'll Bring:
8+ years of experience in application security, offensive security, or penetration testing.
Strong understanding of web and API security (OWASP Top 10, auth, sessions, access control).
Experience testing modern SaaS products.
Comfort working in cloud environments (AWS / GCP / Azure at a practical level).
Experience with common security testing tools (Burp Suite, Nuclei, etc.).
Ability to communicate findings clearly and pragmatically to engineers.
Self-starter mindset — comfortable operating with limited process and high ownership. Preferred, but not required:
Startup experience or early-stage product exposure.
Bug bounty or responsible disclosure experience.
Secure code review experience (any major language).
Familiarity with CI/CD and modern SDLC security.
Offensive security certifications (OSCP, GWAPT, etc.).

DevRev is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.

You've read the whole posting — now see how you match it.

Evaluate my fit