Search by job, company or skills

Arrive - Senior Product Security Engineer

Arrive - Senior Product Security Engineer

Arrive
9-11 Years
Not Disclosed
  • Posted an hour ago
  • Be among the first 10 applicants

Job Description

About Us

Arrive, including brands like EasyPark, Flowbird, RingGo, ParkMobile and Parkopedia, is a leading global mobility platform. Present in over 90 countries and 20,000 cities, the company helps people and decision-makers make smarter decisions about urban mobility and ease the experience of travel worldwide.

Role Overview

We are seeking a Product Security Engineer to strengthen the security posture of our applications and cloud-native platforms. This role focuses on proactive application security testing, vulnerability management, secure SDLC integration, and collaboration with engineering teams.

Key Responsibilities

  • Application & API Security :
  • Conduct manual and automated penetration testing of web applications and APIs.
  • Identify and validate vulnerabilities aligned with OWASP Top 10 and API Security Top 10.
  • Perform threat modeling for new features and services.
  • Conduct secure code reviews and recommend remediation.
  • Cloud & Infrastructure Security :
  • Assess AWS/Azure/GCP configurations for common misconfigurations.
  • Review IAM policies, storage access controls, and container security posture.
  • Vulnerability Management :
  • Prioritize vulnerabilities using CVSS and business impact context.
  • Track remediation SLAs and support risk acceptance decisions.
  • Security Testing & Automation :
  • Develop scripts and tooling (Python/Bash) to automate testing workflows.
  • Collaboration & Reporting :
  • Prepare high-quality technical reports with clear risk articulation.

Required Skills

  • 9 years of experience in Application Security, Product Security, or Offensive Security.
  • Hands-on experience conducting web and API penetration testing.
  • Strong understanding of OWASP Top 10 and common attack vectors.
  • Experience using tools such as Burp Suite, OWASP ZAP, Nmap, Snyk, Checkmarks, etc.
  • Experience working with cloud platforms (AWS/Azure/GCP).
  • Strong understanding of HTTP, authentication mechanisms, and networking fundamentals.

Why Join Arrive

  • Work on global-scale payment systems impacting millions of users.
  • Be part of a growing India engineering team with strong ownership.
  • Collaborate with diverse, international teams.
  • Build technology that directly improves urban mobility and sustainability.

(ref:hirist.tech)

More Info

Job Type:
Industry:
Employment Type:

Key Skills

Offensive Security

Snyk

OWASP ZAP

Web and API penetration testing

Checkmarks

HTTP authentication mechanisms

Networking fundamentals

API Security Top 10

About Company