RIB
engineering and construction
SeniorProductSecurityEngineer
Neural analysis suggests this role is
optimal for Senior candidates.
“Senior Product Security Engineer at RIB. Skills: Product Security, Application Security, Secure Development Lifecycle (SDL), Threat Modeling, Risk Assessment, Vulnerability Management, AI Security Integration. Own operational security for assigned RIB Software products. Execute secure development lifecycle (SDL) requirements”
What You'll Achieve.
Ensure compliance through coordinated security reviews and assessments; Track and manage product-specific security issues through resolution; Empower the team's use of AI by sharing knowledge of effective human-AI collaboration practices in product development and security workflows
Industry & Context.
Risk assessment; Vulnerability management; Problem-solving
Background checks may be required, May involve additional background check criteria for sensitive data roles
What They're Looking For.
Must Have
5+ years experience in product security or application security, understanding of SDL processes and security compliance frameworks, Proven ability to conduct security testing using SAST, DAST, and SCA tools, Familiarity with one or more of C#, Typescript, Java, JavaScript, Dart, C++, Python, and/or Delphi, Experience with vulnerability management and risk assessment, Excellent communication skills for technical and business stakeholders, Project management experience with cross-functional teams, Ability to drive improvements in security culture, Demonstrated ability to work independently and provide guidance to technical colleagues, Experience incorporating AI tools into your workflow, Ability to critically evaluate AI-generated outputs, Ability to describe how you have adapted how you work as a result of using AI, Ability to review AI output critically before accepting it
Nice to Have
CSSLP or similar secure development certification, Familiarity with cloud security best practices (preferably Azure), Experience with enterprise software security frameworks (SOC 2, ISO 27001), Experience with product or cloud security architecture, Background in SaaS or enterprise software environments, Hands-on experience evaluating security risks specific to AI/ML-integrated products (e.g., prompt injection, model data leakage, non-deterministic output handling), Familiarity with using AI-assisted security tooling (e.g., AI-powered SAST, vulnerability triage tools, or LLM-based code review assistants)
What You'll Do.
Own operational security for assigned RIB Software products
Execute secure development lifecycle (SDL) requirements
Ensure compliance through coordinated security reviews and assessments
Serve as the primary security point of contact for product teams
Collect evidence required for compliance
Drive regular threat modelling
and risk assessments for assigned products
Track and manage product-specific security issues through resolution
Manage supply chain security risks for externally provided components
Collect and maintain compliance evidence
Coordinate security activities with development teams
Identify and refine security requirements applicable to the product
Serve as primary contact for customer security discussions
and vulnerability disclosure
Support security training and assessment initiatives
Mentor assigned Product Security Engineers
Contribute to the security architecture and roadmap
Leverage AI tools to accelerate security reviews
and vulnerability analysis
Critically assess AI-generated outputs
Assess AI-specific security risks in products that integrate LLMs
generative AI features
or AI-powered components
Empower the team's use of AI by sharing knowledge of effective human-AI collaboration practices
How You'll Work.
Team & Collaboration
Work collaboratively across multidisciplinary teams including Security Architects, Product Owners, Developers, Quality Engineers, DevOps, Security Operations, and Governance; Coordinate security activities with development teams through Security Architects and Product Owners in collaboration with our Vulnerability Assessment and Penetration Testing team; Provide guidance to technical colleagues; Collaborative review and guidance
Communication Scope
Excellent communication skills for technical and business stakeholders; Communicating status to leadership; Serve as primary contact for customer security discussions
Process & Methodology
Project management experience with cross-functional teams
Full Job Description
Driven by transformative digital technologies and trends, we are RIB and we’ve made it our purpose to propel the industry forward and make engineering and construction more efficient and sustainable. Built on deep industry expertise and best practice, and with our people at the heart of everything we do, we deliver the world's leading end-to-end lifecycle solutions that empower our industry to build better. With a steadfast commitment to innovation and a keen eye on the future, RIB comprises over 2,500 talented individuals who extend our software’s reach to over 100 countries worldwide. We are experienced experts and professionals from different cultures and backgrounds and we collaborate closely to provide transformative software products, innovative thinking and professional services to our global market. Our strong teams across the globe enable sustainable product investment and enhancements, to keep our clients at the cutting-edge of engineering, infrastructure and construction technology. We know our people are our success – join us to be part of a global force that uses innovation to enhance the way the world builds. Find out more at [RIB Careers](https://www.rib-software.com/en/career). **Job Title:** Senior Product Security Engineer **Experience Required:** 5-7 years **Location:** Pune, India **Job Type:** Full-time Driven by transformative digital technologies and trends, here at RIB we’ve made it our primary purpose to propel the industry forward and make engineering and construction more efficient and sustainable. Managing the entire building lifecycle from planning to construction, the development of our powerful portfolio of software solutions is driven by industry expertise, best practice and a passion to remain at the cutting edge of technology. Ultimately, connecting people, processes and data in innovative ways to ensure customers always complete projects within budget, on time and to quality, while reducing their carbon footprint. RIB Software is a
Applying for this Senior Product Security Engineer role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on Workday
- Workday has a multi-step form — save your progress after every section.
- "Apply With LinkedIn" can fail or lose data; manual entry is more reliable.
- Watch for the "Submit for Review" final step — hitting "Save" alone does not submit.
- Job requisition numbers are useful when following up with HR by email.
ANONYMOUS · UNFILTERED
What do employees actually say about RIB?
Real rants from real employees. Read before you apply.