Overview
Ecolab’s Information Security team is seeking a Senior Security Engineer with strong expertise in Product Security to lead and enhance secure software development practices across the organization. This role focuses on integrating security into the Software Development Lifecycle (SDLC), identifying and mitigating application vulnerabilities, and guiding development teams on secure coding and architecture. The ideal candidate will have hands-on experience in application security, penetration testing, secure code reviews, and AI/LLM security.
Minimum Qualification
- Bachelor’s degree in computer science, information technology or related discipline.
- 6 - 8 years of experience in the Product Security domain.
Roles and Responsibilities
- Conduct Product Security Risk Assessments for Mobile, Web, API, and IoT applications.
- Perform and remediate findings from SAST, DAST, and manual penetration testing.
- Simulate attacks and generate detailed vulnerability reports.
- Collaborate with internal teams for automated and manual security testing.
- Review software applications for potential security flaws.
- Guide engineering teams on secure development practices and remediation strategies.
- Deliver secure coding training to development and engineering teams.
- Perform secure source code reviews and recommend mitigation strategies.
- Act as a technical liaison for CI/CD and DevSecOps integration.
- Automate security processes and integrate them into development pipelines.
- Stay updated on emerging threats, vulnerabilities, and countermeasures.
- Build and maintain strong relationships with stakeholders and business partners.
Technical Skills & Expertise
- Strong expertise in OWASP Top 10, CWE Top 25, and data protection principles.
- Solid understanding of application architecture in multi-cloud and hybrid environments.
- Hands-on experience with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Container Security, and manual penetration testing.
- Proficiency in interpreting and writing code in Python, JavaScript/TypeScript, Java, C# (.NET), and Apex.
- Deep knowledge of software vulnerabilities, secure design patterns, and threat mitigation strategies.
- Experience integrating security into CI/CD pipelines and Developers workflows.
- Strong working knowledge of Web Application Firewall (WAF) technologies
- Knowledge on OWASP Top 10 for LLMs and emerging AI security frameworks.
- Understanding of Prompt Injection, Data Poisoning, and Model Theft threats.
- Experience securing AI APIs, ML pipelines, and LLM-based applications.
- Knowledge of API Security, Infrastructure as Code (IaC) Security, and Secrets Management.
- Experience in Threat Modelling and Attack Simulation techniques
Security Tools & Technologies
- Web Application Firewalls (WAF): Fastly, Cloudflare, Akamai
- Tools: Snyk, Qualys, Burp Suite, Wiz, Postman, MobSF, Elastic, Agentic Scanner
- Cloud: Azure, AWS, GCP
SCM: ADO, GitHub
Skills Required
- Bachelor's degree in computer science, information technology, or a related discipline
- 6-8 years of experience in Product Security
- Expertise in OWASP Top 10, CWE Top 25, and data protection principles
- Experience with application security, secure code reviews, penetration testing, SAST, and DAST
- Experience with container security, CI/CD security integration, and DevSecOps
- Proficiency interpreting and writing Python, JavaScript or TypeScript, Java, C# or .NET, and Apex
- Understanding of multi-cloud and hybrid application architecture
- Working knowledge of Web Application Firewall technologies
- Knowledge of OWASP Top 10 for LLMs and emerging AI security frameworks
- Experience securing AI APIs, ML pipelines, and LLM-based applications
- Knowledge of API Security, Infrastructure as Code Security, and Secrets Management
- Experience with threat modeling and attack simulation techniques
- Experience with Fastly, Cloudflare, Akamai, Snyk, Qualys, Burp Suite, Wiz, Postman, MobSF, Elastic, Agentic Scanner, Azure, AWS, GCP, ADO, or GitHub
Ecolab Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Ecolab and has not been reviewed or approved by Ecolab.
-
Retirement Support — Feedback suggests the company provides strong retirement programs, including a 401(k) with employer matching and a pension, alongside options like an employee stock purchase plan. Offerings such as retiree healthcare benefits and diverse investment choices reinforce long-term financial support.
-
Healthcare Strength — Feedback suggests medical coverage is broad, with HSA plan options and company contributions, prescription benefits, dental and vision, and virtual care and mental health support. Company-paid wellness programs and income protection (short- and long-term disability, life and accident) further strengthen core coverage.
-
Parental & Family Support — Family-focused programs include fertility support, adoption assistance, and paid parental leave, complemented by counseling and resource services. These offerings are positioned as supportive of employee well-being across different life stages.
Ecolab Insights
What We Do
A trusted partner at nearly three million customer locations, Ecolab (ECL) is the global leader in water, hygiene and infection prevention solutions and services. With annual sales of $12 billion and more than 44,000 associates, Ecolab delivers comprehensive solutions, data-driven insights and personalized service to advance food safety, maintain clean and safe environments, optimize water and energy use, and improve operational efficiencies and sustainability for customers in the food, healthcare, hospitality and industrial markets in more than 170 countries around the world. For more Ecolab news and information, visit www.ecolab.com, or follow us on twitter.com/ecolab, facebook.com/ecolab or instagram.com/ecolab_inc.
