Sr. Product Cybersecurity Engineer

Actively Reviewing the Applications

Johnson Controls

4–8 years

Posted 4 days ago • Apply by June 11, 2026

Job Description

Job Title: Sr. Product Cybersecurity Engineer

Location: Pune, India

What You Will Do

In this pivotal role within the Global Product Security team, you will be responsible for driving continuous improvement initiatives aligned with our cybersecurity maturity framework, ensuring proactive management of security and data privacy risks throughout the product lifecycle. You will leverage your expertise in secure software development practices to embed security and privacy by design within our product offerings.

How You Will Do It

Provide cybersecurity guidance and expertise to product development teams and business leaders during all phases of the software development lifecycle.
Architect security and privacy by design into software applications for mobile, embedded systems, and cloud environments.
Drive secure SDLC activities including security requirements, architectures, threat models, and testing.
Periodically assess and refine security policies, standards, and compliance metrics.
Quantify product risk and identify appropriate security controls.
Review product architectures for security vulnerabilities and collaborate on remediation strategies.
Coordinate with third-party penetration testing teams to ensure comprehensive security assessments.
Maintain awareness of current security threats and vulnerabilities impacting our products.
Support incident response operations and vulnerability remediation activities.
Drive security awareness and training initiatives across the organization.

What We Look For

Bachelor's or higher degree in Engineering, Cybersecurity, or a related technical field.
Need someone who has experience as a Software Developer or Software Engineer with Cybersecurity experience.
5-10 years of experience in product or application cybersecurity.
Strong knowledge of secure SDLC practices, security architectures, and compliance activities.
Proven experience in delivering results using agile methodologies.
Solid understanding of security threats, attack vectors, and appropriate security controls.
Excellent problem-solving and analytical skills.
Strong communication and interpersonal skills to convey complex security concepts to diverse audiences.
Familiarity with security frameworks such as NIST, ISO 27001, and GDPR.
Relevant cybersecurity certifications (e.g., CISSP, CEH) are a plus.

What We Offer