---
title: 'Product Security Engineer at Harness'
canonical: 'https://feeny.ai/job/product-security-engineer-harness-bengaluru-wk7mc3884jww'
type: 'job'
last_seen: '2026-10-12'
---

# Product Security Engineer at Harness 

- **Company:** Harness 
- **Location:** Bengaluru, India
- **Posted:** 2026-09-25
- **Last confirmed live:** 2026-10-12
- **Apply:** https://www.harness.io/company/jobs/apply?gh_jid=5247379007&gh_jid=5247379007

## Job description

Harness is the AI Software Delivery Platform company, led by technologist and entrepreneur Jyoti Bansal (founder of AppDynamics, acquired by Cisco for $3.7B). Harness has raised approximately $570M in funding and is valued at $5.5B, backed by leading investors including Goldman Sachs, Menlo Ventures, IVP, Unusual Ventures, Citi Ventures, and more. As AI accelerates code creation, the real bottleneck has shifted to everything after the code – testing, deployments, application security, reliability, compliance, and cost optimization. Harness brings AI and automation to this “outer loop,” helping teams ship software faster while maintaining security and governance throughout the entire software delivery lifecycle.

Powered by Harness AI and the Software Delivery Knowledge Graph, the Harness Platform applies deep context and intelligent automation across the software delivery lifecycle with governance and policy-driven controls embedded throughout the platform.

Over the past year, Harness powered over 185M deployments, 82M builds, 18T flag evaluations, 8M security scans, 9.1B optimized tests, 3T protected API calls, and helped manage $2.8B in cloud spend — enabling customers like United Airlines, Morningstar, and Choice Hotels to accelerate releases by up to 75%, reduce cloud costs by up to 60%, and achieve 10x DevOps efficiency.

With a global team across 26 offices and 27 countries, Harness is shaping the future of AI software delivery — and we’re looking for exceptional talent to help us move even faster.

Product Security Engineer

Overview:

The Product Security Engineer helps keep Harness software secure across the development lifecycle, with a strong focus on the day-to-day work that keeps product security moving: customer security escalations, incoming security alerts, and vulnerability management from triage through remediation.

This role partners with engineering to find, prioritize, and fix vulnerabilities; run and tune scanners such as Semgrep, Snyk, and Prisma Cloud; and fold security checks into CI/CD so issues are caught before they ship. It also drives internal adoption of Harness security modules (STO, SCS, and related platform capabilities) so we use our own product the way customers should, and so shift-left and software supply-chain practices stick across teams.

## Key Responsibilities

- Own daily product-security operations, triage customer security escalations, investigate security alerts, and drive vulnerability management to closure with clear owners, SLAs, and status.
- Lead identification, triage, and remediation of vulnerabilities across the Harness platform and modules, partnering with engineering to track progress and unblock fixes.
- Operate and improve SAST/SCA and cloud/container scanning with tools such as Semgrep, Snyk, and Prisma Cloud (and equivalents), including tuning rules, reducing noise, and keeping reporting consistent.
- Integrate security controls into CI/CD (Harness, GitHub Actions, or similar) so scans, gates, and supply-chain checks run as part of the pipeline, not as an afterthought.
- Promote and implement Harness STO and SCS internally: define adoption strategy, land the workflows on real pipelines, and use internal usage as the reference for customer-facing best practice.
- Support release security advisories by helping produce and review customer-facing vulnerability summaries for product and platform releases.
- Establish and maintain software supply-chain practices (dependency management, artifact integrity, SLSA-oriented controls) and stay current on emerging supply-chain threats.
- Plan and support periodic penetration tests with internal teams and external testers; use findings to validate and strengthen controls.
- Evaluate and recommend security tools to close coverage gaps; automate vulnerability management and reporting so response time and visibility stay high.
- Partner with incident response on product-related security incidents; support compliance work with audit-ready evidence.
- Apply the OWASP Top 10 (and API/LLM-adjacent variants where they apply) when triaging findings, reviewing designs, and advising teams on what actually matters versus scanner noise.
- Enable engineering, platform, and DevOps teams through practical training so security is treated as part of delivery, not a separate queue.

## Qualifications

- Proven experience in product security, vulnerability management, and secure software development lifecycle practices.
- Hands-on expertise with security tools such as OWASP ZAP, Burp Suite, Snyk, Prisma Cloud, Semgrep, or equivalent.
- Strong understanding of CI/CD processes, tools (e.g., Jenkins, GitHub Actions, Harness), and shift-left security approaches.
- Knowledge of secure coding practices, threat modeling methodologies, and supply chain security principles.
- Working knowledge of the OWASP Top 10 and how to map it to real product issues (injection, broken access control, SSRF, insecure design, etc.), not only the list by name.
- Familiarity with AI security concerns in both the SDLC (AI-generated code, Copilot/Cursor-style tools) and the product (LLM apps, agents): prompt injection, sensitive-data exposure, insecure plugin/tool use, and basic OWASP LLM Top 10 awareness.
- Familiarity with different types of security testing (SAST, DAST, IaC, SCA) and proficiency in evaluating scanning tools.
- Strong collaboration skills with engineering and DevOps teams to embed security practices effectively.
- Passion for fostering a security-first culture through enablement, training, and continuous improvement.
- Excellent communication skills to convey technical security concepts to diverse stakeholders.
- Working knowledge of cloud environments (AWS, GCP, or Azure) and securing containerized applications (Docker, Kubernetes).
- Experience scripting or automating security workflows using Python, Go, or similar languages.

Harness in the news:

- [Accelerating Our Mission to Bring AI to Everything After Code](https://www.harness.io/blog/240m-financing-to-bring-ai-to-everything-after-code)
- [Goldman Sachs leads investment in software delivery startup Harness at $5.5 billion valuation](https://www.cnbc.com/2025/12/11/harness-is-worth-5point5-billion-in-round-led-by-goldman-sachs.html)
- [How Harness runs 16 “startups within a startup” at scale | Jyoti Bansal](https://www.youtube.com/watch?v=LvOYXKAyAqs)
- [Harness Research Shows AI Visibility Crisis Fueling Security Nightmare](https://www.digit.fyi/ai-visibility-crisis-fuelling-security-nightmare/)
- [Harness has been named to the Inc. Power Partner list for software delivery success](https://www.harness.io/blog/we-made-inc-s-2025-power-partners-list-again---heres-why-it-matters)

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex or national origin.

At Harness, we care about your privacy and are committed to protecting your personal data. For additional information on this topic, you can visit our privacy Portal: https://harness-privacy.relyance.ai/

Note on Fraudulent Recruiting/Offers

We have become aware that there may be fraudulent recruiting attempts being made by people posing as representatives of Harness. These scams may involve fake job postings, unsolicited emails, or messages claiming to be from our recruiters or hiring managers.

Please note, we do not ask for sensitive or financial information via chat, text, or social media, and any email communications will come from the domain @harness.io. Additionally, Harness will never ask for any payment, fee to be paid, or purchases to be made by a job applicant. All applicants are encouraged to apply directly to our open jobs via our website. Interviews are generally conducted via Zoom video conference unless the candidate requests other accommodations.

If you believe that you have been the target of an interview/offer scam by someone posing as a representative of Harness, please do not provide any personal or financial information and contact us immediately at security@harness.io. You can also find additional information about this type of scam and report any fraudulent employment offers via the Federal Trade Commission’s website (https://consumer.ftc.gov/articles/job-scams), or you can contact your local law enforcement agency.

## About Harness 

## Company Overview
- **One-liner**: Harness provides an AI-native, end-to-end software delivery platform that automates the entire software development lifecycle (SDLC) using purpose-built AI agents.
- **Entity Type**: Private (Series C, $775M total funding)
- **Headquarters**: San Francisco, California, United States
- **Founded**: 2017
- **Founders**: Jyoti Bansal (CEO)

## Core Business
- **Primary Industry**: Software Development / DevOps / AI-Native Software Delivery
- **Target Customers**: B2B, primarily mid-market to large enterprises in technology, finance, e-commerce, and other sectors with complex software delivery needs.
- **Mission/Purpose**: “To enable the 30 million software developers in the world to deliver code to their users quickly, reliably and efficiently.” [harness.io](https://www.harness.io/company/careers)

## Products & Services
Harness offers a unified platform with multiple product modules, all infused with AI/ML, including:
- **Continuous Integration (CI)**: Automated build and test pipelines.
- **Continuous Delivery (CD)**: Automated deployment and release orchestration.
- **Feature Flags**: Gradual feature rollouts and A/B testing.
- **Cloud Cost Management (CCM)**: Real-time cloud cost optimization and governance.
- **Service Reliability Management (SRM)**: SLO tracking and incident management.
- **Security Testing Orchestration (STO)**: Integrated security scans in CI/CD pipelines.
- **Chaos Engineering**: Proactive resilience testing.
- **Software Engineering Insights (SEI)**: Data-driven engineering productivity metrics.
- **Continuous Error Tracking (CET)**: Real-time error monitoring and debugging.
- **Code Repository**: Git-based source code management.
- **Internal Developer Portal (IDP)**: Self-service developer environments and resources.
- **Software Supply Chain Assurance (SSCA)**: Secure software supply chain management.
- **Infrastructure as Code Management (IaCM)**: Automated infrastructure provisioning.
- **AI Development Assistant (AIDA)**: An AI-powered assistant embedded across the platform to help developers write, debug, and deploy code faster.

## Market Standing
- **Valuation**: Not publicly disclosed (last known Series C round was in 2021 at an undisclosed valuation).
- **Total Funding**: **$775M** (across 9 rounds, including $150M debt financing from Silicon Valley Bank in 2024 and $55M debt in 2022). [linkedin.com](https://www.linkedin.com/company/harnessinc)
- **Annual Revenue**: **$150M** (as of latest available data). [linkedin.com](https://www.linkedin.com/company/harnessinc)
- **Notable Investors**: Alkeon Capital (lead Series C), IVP, Google Ventures, Silicon Valley Bank, and others. [linkedin.com](https://www.linkedin.com/company/harnessinc)
- **Key Acquisitions**: Propelo (2023), Armory (2024), Drone.io, OverOps, Split.io. [linkedin.com](https://www.linkedin.com/company/harnessinc)
- **Growth Signals**:
    - **Headcount**: 1,183 employees (+19.4% YoY, +278 people). [linkedin.com](https://www.linkedin.com/company/harnessinc)
    - **Global Presence**: Operates in 32 countries with offices in the US, India, UK, Argentina, Canada, and Australia.
    - **Market Recognition**: Named a Leader in the 2026 Gartner Magic Quadrant for DevSecOps Platforms for the third consecutive year. [cbinsights.com](https://www.cbinsights.com/company/harness)
    - **Active Hiring**: 116 open job postings (up 107.1% YoY). [linkedin.com](https://www.linkedin.com/company/harnessinc)

## Competitive Advantages
- **AI-Native Platform**: Unlike legacy DevOps tools that bolt on AI, Harness was built from the ground up with AI agents (AIDA) embedded in every module, making it a true “AI-native” platform.
- **Unified End-to-End Solution**: Covers the entire SDLC (CI/CD, security, cost, reliability, error tracking, etc.) in one platform, reducing toolchain complexity for enterprises.
- **Strong Financial Backing**: Over $775M in funding from top-tier VCs provides significant runway and resources for aggressive growth and R&D.
- **Proven Enterprise Adoption**: $150M in annual revenue and a customer base that includes large technology, finance, and e-commerce companies.

## Strategic Focus
- **Deepening AI Capabilities**: Continuing to infuse AIDA across all modules to automate more of the software delivery lifecycle and improve developer productivity.
- **Expanding Enterprise Footprint**: Growing sales and engineering teams globally (especially in the US, India, and Europe) to capture more enterprise accounts.
- **Post-Acquisition Integration**: Integrating recent acquisitions (Propelo, Armory, Split) to enhance the platform’s capabilities in areas like internal developer portals and feature management.
- **Market Leadership**: Maintaining and expanding its position as a leader in the DevSecOps and AI-powered software delivery market.

## Why Work Here
- **Culture & Values**: Harness promotes a culture of “Get Ship Done” (delivery-focused), “Be Bold,” “Stay Humble,” and “Build Trust through Transparency.” [harness.io](https://www.harness.io/company/careers)
- **DEI**: Strong emphasis on diversity, equity, inclusion, and belonging, with dedicated employee resource groups like “Women at Harness” and “Pride in Tech at Harness.” [harness.io](https://www.harness.io/company/careers)
- **Work Environment**: Hybrid/remote-friendly. Employees can choose to work from the office, home, or anywhere they can set up a laptop. [harness.io](https://www.harness.io/company/careers)
- **Perks & Benefits**: Competitive salary, healthcare benefits, flexible time off (US), employee referral bonus, learning & development program, employee assistance program, paid parental leave, and a “TGIF Off” program. [harness.io](https://www.harness.io/company/careers)
- **Engineering Culture**: High technical bar with a focus on innovation (Hack Weeks), autonomy, and trust. Employee testimonials highlight being “trusted to use my own judgement, manage my own time and choose my own work space.” [harness.io](https://www.harness.io/company/careers)
- **Growth Opportunity**: Rapidly growing company (19.4% YoY headcount increase) with a mission-driven, high-impact environment. Employees report good career development opportunities (4.1/5.0 career rating on LinkedIn). [linkedin.com](https://www.linkedin.com/company/harnessinc)

## Sources
1. [harness.io - Careers Page](https://www.harness.io/company/careers)
2. [harness.io - Job Openings](https://www.harness.io/company/jobs)
3. [linkedin.com - Harness Company Profile](https://www.linkedin.com/company/harnessinc)
4. [cbinsights.com - Harness Company Profile](https://www.cbinsights.com/company/harness)
5. [pitchbook.com - Harness Company Profile](https://pitchbook.com/profiles/company/187740-28)

## Other roles at Harness 

- [Senior Customer Architect](https://feeny.ai/job/senior-customer-architect-harness-united-states-ngekkxrd4xxz) — United States
- [Staff/Senior Software Engineer - Cloud Platform Engineering](https://feeny.ai/job/staff-senior-software-engineer-cloud-platform-engineering-harness-united-states-8m35swecqpns) — United States
- [Customer Experience Engineer I/II](https://feeny.ai/job/customer-experience-engineer-i-ii-harness-united-states-xghx1v19wrfg) — United States
- [Senior Sales Engineer - Brazil](https://feeny.ai/job/senior-sales-engineer-brazil-harness-sao-paulo-sao-paulo-ykfs4t2srrgz) — São Paulo São Paulo, Brazil
- [AppSec Sales Engineer - East](https://feeny.ai/job/appsec-sales-engineer-east-harness-atlanta-georgia-3s6yhpktfn29) — Atlanta Georgia, United States / Austin Texas, United States / Dallas Texas, United States / Miami Florida, United States / Raleigh North Carolina, United States / Tampa Florida, United States
- [Senior Field Marketing Manager, Events](https://feeny.ai/job/senior-field-marketing-manager-events-harness-united-states-9h3x9ta1v71z) — United States
- [Senior Outbound Product Manager](https://feeny.ai/job/senior-outbound-product-manager-harness-united-states-5weqesrjxvry) — United States
- [Senior Outbound Product Manager](https://feeny.ai/job/senior-outbound-product-manager-harness-united-states-xd7tnss49eq3) — United States
- [Forward Deployed Engineer (Implementation Engineering)](https://feeny.ai/job/forward-deployed-engineer-implementation-engineering-harness-chicago-illinois-zedehr7vne9x) — Chicago Illinois, United States / New York New York, United States / San Francisco California, United States
- [Sr Enterprise Account Executive - Charlotte, NC](https://feeny.ai/job/sr-enterprise-account-executive-charlotte-nc-harness-charlotte-45dhpac1s1f4) — Charlotte, NC