Staff Product Security Engineer
Teladoc Health · Greater Hyderabad Area
- Experience5–8 yrs
- SalaryNot disclosed
- Work modeonsite
- Posted28 Sept 2026
About Teladoc Health
Teladoc Health is hiring in Greater Hyderabad Area in healthcare. This role looks for around 5+ years of experience.
Skills
- Application Security
- vulnerability assessment
- web security testing
- mobile security testing
- API security testing
- OWASP Top 10
- Secure SDLC
- secure-by-design principles
- secure coding
- SAST
- SCA
- secrets management
- container scanning
- Burp Suite
- vulnerability remediation
- Python
- Go
- Infrastructure as Code
- Terraform
The role
A product security engineer at a healthcare technology company secures applications, platforms, and AI systems through Application Security, vulnerability assessment, and secure development practices. The role applies OWASP Top 10, SAST, and vulnerability management to strengthen software delivery and security outcomes.
Full job description
Staff Product Security Engineer
Summary of Position Key member of the Security team, this role focuses on securing applications, platform and AI systems. The role includes hands-on security testing, secure development practices, and security architecture and ownership of security outcomes.
Essential Duties and Responsibilities Perform VAPT across web, mobile, and API’s. Identify, assess, and help remediate vulnerabilities across the SDLC Partner with engineering teams to embed secure-by-design and secure-by-default practices Support responsible disclosure and/or bug bounty programs Contribute to vulnerability management, risk tracking, and remediation validation Use automation and tooling to improve the efficiency and scale of security controls Integrate security into CI/CD pipelines (SAST, SCA, secrets scanning, container/image scanning) Evaluate, onboard, and operate security tooling, including emerging AI-powered solutions Partner with product and engineering teams to design mitigations and guardrails Provide security architecture guidance for new platforms and features Execute or guide Breach & Attack Simulations (BAS) to validate detection and response Build automation and AI assisted workflows that measurably improve security outcomes
Qualifications Expected for Position Strong experience in Application Security and vulnerability assessment Hands-on expertise with web, mobile and API security testing, including OWASP Top 10 Proven experience supporting vulnerability remediation with engineering teams Solid understanding of: Secure SDLC Security-by-design principles Secure coding and design patterns Hands-on experience with SAST, SCA, secrets management, and container scanning tools Familiarity with common security tools such as Burp Suite, Wiz, Nuclei, or equivalent Familiarity with deploying and managing RASP tools or eBPF kernel controls Practical experience using LLMs in security workflows, including: AI-assisted testing or analysis Coding agents Lightweight automations using APIs (OpenAI, Anthropic, Cursor, etc.) Exposure to AI/ML security concepts Experience with BAS tools or attack simulation frameworks Scripting experience in Python, Go, or similar languages Familiarity with Infrastructure as Code (Terraform or equivalent)