Software Technologist I - Security Engineer – Philips (Bangalore)

Job Overview

Philips is hiring a Software Technologist I - Security Engineer in Bangalore for a full-time opportunity focused on application security and secure software engineering. This role is suited to an experienced software professional who can combine hands-on development knowledge with practical application security expertise.

The position focuses on building security into the software development lifecycle rather than treating security as a final testing step. You will work with engineering, architecture, DevOps, cloud, and product teams to identify security risks, strengthen application controls, review software designs, and support secure-by-design solutions for enterprise platforms.

The role is especially relevant for professionals with experience in Java or C#/.NET who understand how modern cloud-native applications, APIs, microservices, and distributed systems are developed and secured. The position also involves threat modeling, vulnerability assessment, penetration-test findings, secure coding, identity controls, secrets management, and data protection.

Key Responsibilities

• Apply secure software development practices while designing, developing, reviewing, and improving enterprise applications.
• Help engineering teams identify security risks early in the software development lifecycle and recommend practical controls.
• Perform threat modeling exercises to understand potential attack paths and security weaknesses in applications and services.
• Assess vulnerability risks and support prioritization based on technical impact and business context.
• Review findings from penetration testing and help coordinate timely vulnerability triage and remediation.
• Promote secure coding standards across application development activities.
• Evaluate application architecture and implementation decisions from an application security perspective.
• Support security controls related to Identity and Access Management, Role-Based Access Control, secrets management, encryption, and data protection.
• Collaborate with software engineers, architects, DevOps teams, cloud specialists, and product stakeholders to improve application security.
• Contribute to security reviews of APIs, microservices, distributed applications, and cloud-native solutions.
• Apply structured problem-solving to investigate security concerns and help teams implement sustainable fixes.
• Communicate security risks, recommendations, and remediation priorities clearly to both technical and non-technical stakeholders.

Required Skills

Candidates should have solid software engineering experience combined with practical application security knowledge. Strong experience with Java and/or C#/.NET is important, including familiarity with secure development practices in enterprise software environments.

Relevant Java technologies may include Spring Boot and Spring Security. For the Microsoft ecosystem, useful experience includes ASP.NET Core, .NET Framework, and .NET Core.

A strong understanding of secure coding standards is expected. Candidates should also understand how security controls are incorporated into application architecture and development practices.

Hands-on experience with threat modeling, vulnerability risk assessments, penetration-testing findings, and vulnerability remediation is required. Knowledge of IAM, RBAC, secrets management, data protection, and encryption is also important.

Preferred Skills

Experience working with enterprise-scale applications and distributed systems is valuable for this position. Exposure to cloud-native application architectures, APIs, microservices, DevOps processes, and modern software delivery practices can further strengthen a candidate's profile.

Candidates who can work closely with multiple engineering and technology teams and explain security issues in practical terms will be well suited to the role.

Education

A Bachelor's degree in Computer Science, Software Engineering, Information Technology, or a related discipline is required. Equivalent vocational education in Information Technology may also be considered.

Experience

The role requires 5 to 8 years of experience in software engineering, application development, or application security. At least 3 years of hands-on experience implementing secure coding practices and application security controls is specifically expected.

Experience with enterprise-scale applications and distributed systems is also relevant.

Required Technologies

The technical environment includes Java, Spring Boot, Spring Security, C#/.NET, ASP.NET Core, .NET Framework, and .NET Core. Security concepts and technologies include Identity and Access Management, Role-Based Access Control, secrets management, encryption, and data protection.

The role also involves APIs, microservices, cloud-native applications, distributed systems, threat modeling, vulnerability assessment, penetration testing, and secure software development.

Soft Skills

Strong analytical thinking and structured problem-solving are important because application security work often requires understanding complex technical issues and selecting appropriate remediation approaches.

Attention to detail is essential when reviewing application code, architecture, security controls, and vulnerability findings. Clear communication and interpersonal skills are equally important because the engineer will work across engineering, architecture, DevOps, cloud, and product teams.

Candidates should be collaborative and comfortable explaining security requirements in a way that development teams can apply during day-to-day software engineering work.

Benefits of Working in this Role

This role offers an opportunity to work at the intersection of software engineering and application security. Professionals can deepen their experience in secure coding, vulnerability management, threat modeling, identity controls, cloud-native applications, and security architecture.

Working across software engineering, architecture, DevOps, cloud, and product functions can also provide broader exposure to how enterprise technology teams integrate security into the complete software development lifecycle.

Work Mode

This is an office-based role in Bangalore. The job description states that employees are expected to work in person at least 3 days per week.

Location

Bangalore, Karnataka, India.

Who Should Apply

This opportunity is suitable for experienced software engineers, application security engineers, and security-focused developers with 5 to 8 years of relevant experience.

Candidates with strong Java or C#/.NET development backgrounds and at least 3 years of practical application security experience should consider this role. It is particularly relevant to professionals who have worked with secure coding, threat modeling, vulnerability assessments, penetration testing, IAM, RBAC, secrets management, encryption, APIs, microservices, or distributed enterprise applications.

Career Growth

The role can support career development across application security, secure software engineering, product security, cloud security, security architecture, and DevSecOps-oriented responsibilities. Its cross-functional nature can help professionals build a broader understanding of how security requirements are translated into software design, development, testing, and operational practices.

Application Advice

Tailor your resume to clearly show both software engineering and security experience. Highlight Java or C#/.NET development work, secure coding practices, and the application security controls you have implemented.

Include concrete examples of threat modeling, vulnerability assessments, penetration-test remediation, IAM, RBAC, secrets management, encryption, API security, or microservice security where applicable. If you have worked on enterprise-scale or distributed systems, explain your contribution and the security challenges you addressed.