About the role

Aplyr's Quick Take

This role is for a Senior Security Engineer focused on enhancing security in software development at Ecolab. You'll be assessing risks, conducting penetration tests, and guiding teams on secure coding practices. It's primarily an individual contributor role with a strong emphasis on technical skills in application security.

Good fit

Ideal candidates have 6-8 years of experience in product security, with hands-on skills in penetration testing and secure coding. A collaborative working style and the ability to communicate security concepts to developers will help you thrive here.

Worth noting

The role involves staying updated on emerging AI security threats, which is a unique focus area. Additionally, the position requires a strong technical background in multiple programming languages and security frameworks.

Overview

Ecolab’s Information Security team is seeking a Senior Security Engineer with strong expertise in Product Security to lead and enhance secure software development practices across the organization. This role focuses on integrating security into the Software Development Lifecycle (SDLC), identifying and mitigating application vulnerabilities, and guiding development teams on secure coding and architecture. The ideal candidate will have hands-on experience in application security, penetration testing, secure code reviews, and AI/LLM security.

Minimum Qualification

Bachelor’s degree in computer science, information technology or related discipline.
6 - 8 years of experience in the Product Security domain.

Roles and Responsibilities

Conduct Product Security Risk Assessments for Mobile, Web, API, and IoT applications.
Perform and remediate findings from SAST, DAST, and manual penetration testing.
Simulate attacks and generate detailed vulnerability reports.
Collaborate with internal teams for automated and manual security testing.
Review software applications for potential security flaws.
Guide engineering teams on secure development practices and remediation strategies.
Deliver secure coding training to development and engineering teams.
Perform secure source code reviews and recommend mitigation strategies.
Act as a technical liaison for CI/CD and DevSecOps integration.
Automate security processes and integrate them into development pipelines.
Stay updated on emerging threats, vulnerabilities, and countermeasures.
Build and maintain strong relationships with stakeholders and business partners.

Technical Skills & Expertise

Strong expertise in OWASP Top 10, CWE Top 25, and data protection principles.
Solid understanding of application architecture in multi-cloud and hybrid environments.
Hands-on experience with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Container Security, and manual penetration testing.
Proficiency in interpreting and writing code in Python, JavaScript/TypeScript, Java, C# (.NET), and Apex.
Deep knowledge of software vulnerabilities, secure design patterns, and threat mitigation strategies.
Experience integrating security into CI/CD pipelines and Developers workflows.
Strong working knowledge of Web Application Firewall (WAF) technologies
Knowledge on OWASP Top 10 for LLMs and emerging AI security frameworks.
Understanding of Prompt Injection, Data Poisoning, and Model Theft threats.
Experience securing AI APIs, ML pipelines, and LLM-based applications.
Knowledge of API Security, Infrastructure as Code (IaC) Security, and Secrets Management.
Experience in Threat Modelling and Attack Simulation techniques

Security Tools & Technologies

Web Application Firewalls (WAF): Fastly, Cloudflare, Akamai
Tools: Snyk, Qualys, Burp Suite, Wiz, Postman, MobSF, Elastic, Agentic Scanner
Cloud: Azure, AWS, GCP
SCM: ADO, GitHub

Skills & Tags

product

Aplyr's read

Ecolab excels in providing essential water, hygiene, and energy solutions, attracting professionals committed to sustainability and innovation in environmental services.
Synthesized from recent postings & public sources

What's promising

•Ecolab leads in sustainable water and hygiene solutions, crucial for environmental safety.
•The company offers diverse roles, from technical to managerial, supporting career growth.
•Strong global presence ensures stability and opportunities for international work experience.

What to watch

•Ecolab's work can involve high-pressure environments due to client demands.
•Limited public information about internal career progression and employee satisfaction.
•The company faces challenges in balancing rapid growth with maintaining service quality.

Why Ecolab

•Ecolab integrates advanced technology with environmental services, setting it apart in the industry.
•Its focus on sustainability directly impacts global ecological health.
•The company's extensive client base spans multiple industries, offering varied professional experiences.

Aplyr’s read is generated by AI from public sources. Was it useful?

About Ecolab

Ecolab

ecolab.com

View company

Ecolab is a global leader in water, hygiene, and energy technologies and services, providing comprehensive solutions to help businesses maintain clean and safe environments.