Product Security Specialist

Digital Technology Specialist - Product Security Digital Technology Specialist - Product Security Do you enjoy programming and leading a team which builds and supports securing products? Would you like to be part of a successful team? Join our Team. Baker Hughes is the leading energy technology company. Our innovative technologies and services are taking energy forward, making it safer, cleaner, and more efficient for people and the planet. We are seeking a highly motivated Product Security Engineer to help secure our software products and development ecosystem. This role is responsible for identifying and mitigating security risks throughout the Software Development Lifecycle (SDLC), partnering with engineering teams to build secure-by-design products, and advancing security practices for AI-assisted software development. The ideal candidate combines strong offensive security skills with practical software engineering knowledge and hands-on experience across application security testing, secure coding, open-source security, and container security. Partner with the best As a Digital Technology Specialist - Product Security, you will be responsible for: Application & Product Security Perform penetration testing and application vulnerability assessments on web, API, cloud, and containerized applications. Identify, validate, prioritize, and communicate security vulnerabilities to development teams. Conduct threat modelling and security design reviews for new products and features. Drive remediation efforts and provide secure coding guidance to engineering teams. Secure SDLC & DevSecOps Embed security controls throughout the Software Development Lifecycle (SDLC). Partner with developers, architects, and DevOps teams to implement security by design. Integrate and optimize security tooling within CI/CD pipelines. Support security automation and policy-as-code initiatives. Application Security Testing Execute and interpret results from: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition Analysis (OSS/SCA) Container Security Scanning Secret Detection and Code Scanning Triage findings, reduce false positives, and drive risk-based remediation. AI Security & AI-SSDLC Assess security risks introduced by AI-assisted development and AI-enabled applications. Support implementation of AI Secure SDLC (AI-SSDLC) practices. Evaluate AI-generated code for security weaknesses and unsafe design patterns. Contribute to AI threat modelling, agent security, prompt security, and secure AI development guardrails. Stay current on emerging risks related to LLMs, AI agents, model abuse, and AI supply chain security. Developer Enablement Deliver security coaching, training, and awareness sessions for development teams. Create actionable security guidance, standards, and best practices. Champion a security-first culture across product engineering teams. Required Experience Bachelor's or Master's degree in Computer Science, Cybersecurity, Software Engineering, or related field. 5-8 years of experience in Application Security, Product Security, Penetration Testing, or Secure Software Engineering. Strong understanding of modern software development practices and SDLC. Experience performing manual and automated penetration testing. Experience securing cloud-native and containerized applications. Strong programming or scripting skills in one or more languages such as Python, Java, JavaScript, C#, Go, or C++. Deep understanding of common vulnerabilities including OWASP Top 10 and API security risks. Technical Skills : Security Testing SAST tools (Checkmarx, Coverity, Fortify, Veracode, CodeQL) DAST tools (Burp Suite, AppScan, Veracode, OWASP ZAP) OSS/SCA tools (Black Duck, Mend, Snyk, Dependency-Check) Container security platforms (Prisma Cloud, Wiz, Aqua, Trivy) Cloud & DevSecOps GitHub, GitLab, Azure DevOps, Jenkins CI/CD security controls Kubernetes and container platforms Infrastructure as Code security AI Security AI Secure SDLC LLM and Agent security concepts Prompt injection and model misuse risks Secure AI application development AI supply chain security and model governance Work in a way that works for you. We recognize that everyone is different and that the way in which people want to work and deliver at their best is different for everyone too. In this role, we can offer the following flexible working patterns: Working remotely from home or any other office location, provided you visit the office when needed. Working flexible hours - flexing the times when you work in the day to help you fit in everything in and work when you are the most productive. Working with us Our people are at the heart of what we do at Baker Hughes. We know we are better when all our people are developed, engaged and able to bring their whole authentic selves to work. We invest in the health and well-being of our workforce, train and reward talent and develop leaders at all levels to bring out the best in each other. Working for you Our inventions have revolutionized energy for over a century. But to keep going forward tomorrow, we know we must push the boundaries today. We prioritize rewarding those who embrace change with a package that reflects how much we value their input. Join us, and you can expect: Contemporary work-life balance policies and well-being activities Comprehensive private medical care options Safety net of life insurance and disability programs Tailored financial programs. Additional elected or voluntary benefits Digital Technology Specialist - Product Security About Us With operations in over 120 countries, we provide better solutions for our customers and richer opportunities for our people. As a leading partner to the energy industry, we are committed to achieving net-zero carbon emissions by 2050 and we are always looking for the right people to help us get there. People who are as passionate as we are about making energy safer, cleaner, and more efficient. Join Us Are you seeking an opportunity to make a real difference in a company with global reach and exciting services and clients? Come join us and grow with a team of people who will energize and inspire you! The Baker Hughes internal title for this role is: Digital Technology Specialist - Product Security Experience Level Mid Level