[Skip to main content](#main-content) [OpenNash Jobs](https://jobs.opennash.com/) [Hiring report](/reports/hiring/) · [All Hitachi jobs](https://jobs.opennash.com/companies/hitachi/) · [Search jobs](/search/) Hitachi · Bengaluru, KA, IN +5 more # Product Security Architect Bengaluru, KA, IN +5 more Full-time Security Listed on Hitachi’s official careers site. Posted October 14, 2026. Check that it is still open and apply there. [Apply on Hitachi’s careers site →](https://careers.hitachi.com/product-security-architect/job/IRC286354) [OpenNash Jobs](https://jobs.opennash.com/) / [Hitachi](https://jobs.opennash.com/companies/hitachi/) / Product Security Architect ## Job description ### Job Description Looking for a Product Security Architect to lead our offensive and defensive security strategies. You will be embedded with engineering teams to ensure our products are resilient against sophisticated attacks. ### This is a "hands-on" role you will write security-centric code, conduct deep-dive penetration tests, and automate threat detection within our pipelines. You are not just an auditor; you are a builder who solves security challenges with engineering solutions. ### Requirements Technical Mastery Required Security Frameworks: OWASP ASVS, SAMM, NIST 800-53, and Cloud Security Alliance (CSA). ### Offensive Tools Burp Suite Professional, Metasploit, Kali Linux, Nmap, and Postman (for API hacking). ### Secure Coding Deep knowledge of vulnerabilities in Java/.NET and how to prevent them (e.g., SQLi, XSS, CSRF, SSRF). ### Cloud Security Securing Kubernetes (K8s) secrets, IAM Least Privilege, and Cloud Workload Protection (CWPP). ### Identity/Auth Expert-level understanding of JWT, OAuth2, OpenID Connect, and WebAuthn/FIDO2. ### Qualifications Experience: 10+ years in Cybersecurity or Software Engineering, with 4+ years specifically in Product Security or Application Security (AppSec). ### Mindset A "Breaker" mentality balanced with a "Builder's" empathy; the ability to explain why a vulnerability matters to a product owner. ### Certifications OSCP (Offensive Security Certified Professional) ### Communication Ability to translate complex exploitation paths into clear risk assessments for non-technical leadership. ### Secure Architecture & Threat Modeling Threat Modeling - Lead structured threat modeling sessions (using STRIDE or PASTA) during the design phase to identify architectural flaws before a single line of code is written. ### Architecture Reviews Conduct deep-dive security reviews of system designs, focusing on authentication (OIDC/SAML), authorization (RBAC/ABAC), and data isolation. ### Security Scaffolding Build and maintain shared security libraries (e.g., standardized encryption wrappers, input validation modules) for use by all engineering teams. ### Offensive Security & Exploitation In-House Pentesting - Perform regular manual penetration tests on web applications, APIs, and cloud infrastructure to identify logic flaws that automated tools miss. ### Exploitation Research Develop PoC (Proof of Concept) exploits for discovered vulnerabilities to demonstrate impact to stakeholders and validate remediation. ### Bug Bounty Management Oversee the bug bounty program, triaging reports and working directly with developers on high-severity fixes. ### Secure Coding & SDLC Integration Secure Code Review - Review high-risk pull requests (e.g., changes to auth, payments, or crypto) to ensure compliance with OWASP Top 10 and ASVS. ### Automation (DevSecOps) Integrate and fine-tune SAST, DAST, and SCA tools into the CI/CD pipeline to reduce "false positive" fatigue for developers. ### Vulnerability Remediation Don't just find bugs—write the code to fix them. Pair-program with engineers to implement secure patterns. ### What we offer Exciting Projects We focus on industries like High-Tech, communication, media, healthcare, retail and telecom. Our customer list is full of fantastic global brands and leaders who love what we build for them. ### Collaborative Environment You Can expand your skills by collaborating with a diverse team of highly talented people in an open, laidback environment — or even abroad in one of our global centers or client facilities! ### Work-Life Balance GlobalLogic prioritizes work-life balance, which is why we offer flexible work schedules, opportunities to work from home, and paid time off and holidays. ### Professional Development Our dedicated Learning & Development team regularly organizes Communication skills training(GL Vantage, Toast Master),Stress Management program, professional certifications, and technical and soft skill trainings. ### Excellent Benefits We provide our employees with competitive salaries, family medical insurance, Group Term Life Insurance, Group Personal Accident Insurance, NPS(National Pension Scheme), Periodic health awareness program, extended maternity leave, annual performance bonuses, and referral bonuses. ### Fun Perks We want you to love where you work, which is why we host sports events, cultural activities, offer food on subsidies rates, Corporate parties. Our vibrant offices also include dedicated GL Zones, rooftop decks and GL Club where you can drink coffee or tea with your colleagues over a game of table and offer discounts for popular stores and restaurants! About GlobalLogic GlobalLogic is a full-lifecycle product development services leader that combines chip-to-cloud software engineering expertise and vertical industry experience to help our customers design, build, and deliver their next-generation products and digital experiences. We expertly integrate design, complex engineering, and agile delivery capabilities to deliver superior business outcomes for global brands in telecom, automotive, healthcare, technology, media and entertainment, manufacturing, and semiconductor industries. Headquartered in Silicon Valley, GlobalLogic employs over 25,000 designers and engineers across the globe. Analysts like NASSCOM and Zinnov have recognized us for being a top company in our field, and we are consistently nominated as a preferred employer by both global HR consultative firms and local job boards. By creating a work environment that is exciting and flexible, and by fostering growth through ongoing learning and development programs, we empower our employees to achieve both their professional and personal goals. At GlobalLogic, we make amazing products — and careers. ## At a glance - Posted by the employer: Oct 14, 2026 - First seen by OpenNash: Oct 12, 2026 - Last checked: Oct 19, 2026 - Listed for: 7 days - Location: Bengaluru, KA, IN +5 more - Employment type: Full-time[Apply on Hitachi’s careers site →](https://careers.hitachi.com/product-security-architect/job/IRC286354) ## More jobs at Hitachi ### [CCTV and Security System Engineer](https://jobs.opennash.com/companies/hitachi/jobs/2ee5b3b0f418133dd37c/) Paço De Arcos, Lisbon, PT ### [Connectivity Service Owner Network Security](https://jobs.opennash.com/companies/hitachi/jobs/66c33a552732bbecc960/) Bengaluru, KA, India ### [Control/Cyber Engineer](https://jobs.opennash.com/companies/hitachi/jobs/5ea883bc5e1c11087efa/) Raleigh, NC, US ### [Customer System Security Engineer – Project Engineering](https://jobs.opennash.com/companies/hitachi/jobs/3df4e121f52701c52f70/) Västerås, Västmanland County, Sweden ### [Cyber Security Architect](https://jobs.opennash.com/companies/hitachi/jobs/8c78ab45f29c2831d0e7/) Poland ## Similar jobs at other companies ### [Embedded Product Security Architect](https://jobs.opennash.com/companies/sandisk/jobs/79a4590b42da55f79af9/) Sandisk ### [Product Security Assurance Architect](https://jobs.opennash.com/companies/sandisk/jobs/f8744be8857b8ba61317/) Sandisk ### [Security Architect - Cyber Security](https://jobs.opennash.com/companies/vodafone/jobs/769d1e41f2fb108d4b71/) Vodafone · Dublin, Ireland ### [Product Security Engineer / Architect – Email Security](https://jobs.opennash.com/companies/state-street/jobs/02472a25442532d93487/) State Street ### [Security Architect](https://jobs.opennash.com/companies/ntt/jobs/f69090735300d1b540d7/) NTT · London, United Kingdom OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)