Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 19 days ago

Senior Product Security Engineer

Whatfix31 open roles

Where
Bengaluru, Karnataka, India
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Product Security EngineerWhatfix · Bengaluru, Karnataka, India

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Whatfix's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market. Whatfix postings stay open a median of 1 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: posted 19 days ago

Whatfix median: 1 days open

The posting

Location: Bengaluru,Karnataka,India

Who are we?

Founded in 2014 by Khadim Batti and Vara Kumar, Whatfix is a leading global B2B SaaS provider and the largest pure-play enterprise digital adoption platform (DAP). Whatfix empowers companies to maximize the ROI of their digital investments across the application lifecycle, from ideation to training to the deployment of software. Driving user productivity, ensuring process compliance, and improving user experience of internal and customer-facing applications.

Spearheading the category with serial innovation and unmatched customer-centricity, Whatfix is the only DAP innovating beyond the category, positioning itself as a comprehensive suite for GenAI-powered digital adoption, analytics, and application simulation. Whatfix product suite consists of 3 products - DAP, Product Analytics, and Mirror. This product suite helps businesses accelerate ROI on digital investments by streamlining application deployment across its lifecycle.

Whatfix has seven offices across the US, India, UK, Germany, Singapore, and Australia and a presence across 40+ countries.

Customers: 700+ enterprise customers, including over 80 Fortune 500 companies such as Shell, Microsoft, Schneider Electric, and UPS Supply Chain Solutions.

Investors: Raised a total of ~$270 million. Most recently Series E round of $125 Million led by Warburg Pincus with participation from existing investor SoftBank Vision Fund 2. Other investors include Cisco Investments, Eight Roads Ventures (A division of Fidelity Investments), Dragoneer Investments, Peak XV Partners, and Stellaris Venture Partners.

  • With over 45% YoY sustainable annual recurring revenue (ARR) growth, Whatfix is among the “Top 50 Indian Software Companies” as per G2 Best Software Awards.
  • Recognized as a “Leader” in the digital adoption platforms (DAP) category for the past 4+ years by leading analyst firms like Gartner, Forrester, IDC, and Everest Group.
  • The only vendor recognized as a Customers’ Choice in the 2024 Gartner® Voice of the Customer for Digital Adoption Platforms has once again earned the Customers’ Choice distinction in 2025. We also boast a star rating of 4.6 on G2 Crowd, 4.5 on Gartner Peer Insights, and a high CSAT of 99.8%
  • Only DAP to be among the top 35% companies worldwide in sustainability excellence with EcoVadis Bronze Medal

On the G2 peer review platform, Whatfix has received 77 Leader badges across all market segments, including Small, Medium, and Enterprise, in 2024, among numerous other industry recognitions.

About the Role & Impact

We are seeking a visionary and hands-on Senior Product Security Engineer to serve as the technical authority and champion for security across modern applications, cloud platforms, and cutting-edge AI/LLM ecosystems. In this high-impact role, you will bridge the gap between innovation and resilience - combining security architecture, threat modeling, secure SDLC, AI security governance, and automated security engineering. Partnering directly with senior engineering leaders and product managers, you will shape our long-term security posture while fostering a security-first engineering culture.

Key Responsibilities

  • Secure SDLC & Security Process Optimization: Define, evolve, and execute the Product Security and Secure SDLC strategy, continuously optimizing security processes through AI Development Lifecycle (AIDLC) practices, security automation, risk-based security gates, and developer-friendly workflows across system design, development, CI/CD, deployment, and runtime environments.
  • Architecture & Threat Modeling: Lead comprehensive threat modeling and security design reviews for multi-tenant SaaS applications, microservices, cloud-native infrastructure, and emerging AI/LLM integrations.
  • AI & LLM Security Testing: Perform hands-on AI/LLM security assessments and testing aligned with the OWASP Top 10 for LLM Applications and MITRE ATLAS, identifying and validating risks such as prompt injection, jailbreaks, data poisoning, insecure output handling, excessive agency, and model abuse.
  • Identity & Zero-Trust Architecture: Architect and refine resilient controls for OAuth 2.0, OIDC, and zero-trust data boundary isolation.
  • DevSecOps & Pipeline Automation: Build and integrate scalable automated security scanners and continuous testing guardrails across CI/CD and LLMOps workflows to empower developer self-service.
  • Cross-Functional Collaboration: Work in lockstep with cloud platform, data engineering, and AI/ML teams to translate security requirements into pragmatic, non-blocking engineering patterns.
  • Standards & Golden Paths: Author reusable security blueprints, standard reference designs, and secure code patterns to simplify compliance across product engineering teams.
  • Leadership & Mentorship: Provide Staff-level technical direction and mentorship to junior engineers, elevating technical quality and cultivating a strong proactive security posture across the enterprise.
  • Supply Chain Security: Establish software supply chain security controls, including Software Bill of Materials (SBOM) management, dependency risk tracking, and open-source vulnerability management across production software and third-party components.
  • Customer Security Engagement: Participate in customer security calls and technical discussions to address security queries, architecture concerns, compliance requirements, and risk assessments, working with engineering and product teams to provide accurate and actionable security responses.

Required Experience

  • Demonstrated Experience: 8+ years of progressive experience in Product Security, Application Security, or Product Security Engineering within SaaS or cloud-native environments.
  • Technical Mastery: Deep expertise in threat modeling, cloud architecture (Azure), API security, microservices design, and DevSecOps tooling.
  • AI/LLM Expertise: Hands-on experience identifying and mitigating risks in modern AI/LLM architectures (RAG, vector databases, agentic frameworks, and fine-tuning pipelines).
  • Identity & Cryptography Knowledge: Strong practical knowledge of OAuth 2.0, OIDC, PKI, and zero-trust concepts.
  • Engineering & Automation Mindset: Ability to write clean, maintainable automation scripts or tools (Python, Go, or similar) to integrate security deeply into standard developer workflows.
  • Strategic Influence: Proven ability to lead by influence, articulate complex technical risks to executive stakeholders, and guide senior engineers at a Staff/Principal level.
  • Supply Chain Assurance: Experience implementing software supply chain frameworks (e.g., SLSA, NIST SSDF) and tools for dependency scanning, attestation, and component risk management.
  • Security Tooling & Automation: Hands-on experience with security and DevSecOps tools such as Trivy, Jenkins, GitHub/GitHub Actions, TruffleHog, Checkmarx One (SAST, SCA, SAST, Secret Scanning, IaC, and Container Security), and Burp Suite, with the ability to integrate and automate security checks across CI/CD pipelines.

Core Areas

Product Security | AI/LLM Security | Application Security | Threat Modeling | Cloud Security | OAuth/OIDC | Secure SDLC | DevSecOps | Security Architecture | Automation

Apply to this job

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Whatfix's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Whatfix's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Whatfix's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.