Logo for Baker Hughes

Digital Technology Specialist - Product Security

Role overview

Qualifications

  • Bachelor's or Master's degree in Computer Science, Cybersecurity, Software Engineering, or related field.
  • 5-8 years of experience in Application Security, Product Security, Penetration Testing, or Secure Software Engineering.
  • Strong understanding of modern software development practices and SDLC.
  • Experience performing manual and automated penetration testing.

Responsibilities

  • Perform penetration testing and application vulnerability assessments on web, API, and cloud applications.
  • Identify, validate, prioritize, and communicate security vulnerabilities to development teams.
  • Embed security controls throughout the Software Development Lifecycle (SDLC).
  • Deliver security coaching, training, and awareness sessions for development teams.

Key facts

Hard skills

Other skills

  • Communication
  • Teamwork
  • Problem Solving

About the company

Baker Hughes logo

Baker Hughes

Energy Technology

Baker Hughes (NASDAQ: BKR) is an energy technology company that provides solutions for energy and industrial customers worldwide. Built on a century of experience and conducting business in over 120 countries, our innovative technologies and services are taking energy forward – making it safer, cleaner and more efficient for people and the planet. For more than a century, our inventions have revolutionized energy. We harness the power of engineering, data, and science to redefine what's possible. Our diverse portfolio of equipment and service capabilities span the energy and industrial value chain. Our two operating segments, Oilfield Services & Equipment (OFSE) and Industrial & Energy Technology (IET), are organized based on the nature of our markets and customers, and consist of similar products and services. Visit us at bakerhughes.com to learn more.

Company details

Company typeLarge
IndustryEnergy Technology
Company size10001

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

Digital Technology Specialist - Product Security


Do you enjoy programming and leading a team which builds and supports securing products?

Would you like to be part of a successful team?


Join our Team.

Baker Hughes is the leading energy technology company. Our innovative technologies and services are taking energy forward, making it safer, cleaner, and more efficient for people and the planet.

We are seeking a highly motivated Product Security Engineer to help secure our software products and development ecosystem. This role is responsible for identifying and mitigating security risks throughout the Software Development Lifecycle (SDLC), partnering with engineering teams to build secure-by-design products, and advancing security practices for AI-assisted software development.

The ideal candidate combines strong offensive security skills with practical software engineering knowledge and hands-on experience across application security testing, secure coding, open-source security, and container security.

Partner with the best

As a Digital Technology Specialist - Product Security, you will be responsible for:


Application & Product Security

  • Perform penetration testing and application vulnerability assessments on web, API, cloud, and containerized applications.
  • Identify, validate, prioritize, and communicate security vulnerabilities to development teams.
  • Conduct threat modelling and security design reviews for new products and features.
  • Drive remediation efforts and provide secure coding guidance to engineering teams.

Secure SDLC & DevSecOps

  • Embed security controls throughout the Software Development Lifecycle (SDLC).
  • Partner with developers, architects, and DevOps teams to implement security by design.
  • Integrate and optimize security tooling within CI/CD pipelines.
  • Support security automation and policy-as-code initiatives.

Application Security Testing

  • Execute and interpret results from:
    • Static Application Security Testing (SAST)
    • Dynamic Application Security Testing (DAST)
    • Software Composition Analysis (OSS/SCA)
    • Container Security Scanning
    • Secret Detection and Code Scanning
  • Triage findings, reduce false positives, and drive risk-based remediation.

AI Security & AI-SSDLC

  • Assess security risks introduced by AI-assisted development and AI-enabled applications.
  • Support implementation of AI Secure SDLC (AI-SSDLC) practices.
  • Evaluate AI-generated code for security weaknesses and unsafe design patterns.
  • Contribute to AI threat modelling, agent security, prompt security, and secure AI development guardrails.
  • Stay current on emerging risks related to LLMs, AI agents, model abuse, and AI supply chain security.

Developer Enablement

  • Deliver security coaching, training, and awareness sessions for development teams.
  • Create actionable security guidance, standards, and best practices.
  • Champion a security-first culture across product engineering teams.

Required Experience

  • Bachelor's or Master's degree in Computer Science, Cybersecurity, Software Engineering, or related field.
  • 5-8 years of experience in Application Security, Product Security, Penetration Testing, or Secure Software Engineering.
  • Strong understanding of modern software development practices and SDLC.
  • Experience performing manual and automated penetration testing.
  • Experience securing cloud-native and containerized applications.
  • Strong programming or scripting skills in one or more languages such as Python, Java, JavaScript, C#, Go, or C++.
  • Deep understanding of common vulnerabilities including OWASP Top 10 and API security risks.

Technical Skills :


Security Testing

  • SAST tools (Checkmarx, Coverity, Fortify, Veracode, CodeQL)
  • DAST tools (Burp Suite, AppScan, Veracode, OWASP ZAP)
  • OSS/SCA tools (Black Duck, Mend, Snyk, Dependency-Check)
  • Container security platforms (Prisma Cloud, Wiz, Aqua, Trivy)

Cloud & DevSecOps

  • GitHub, GitLab, Azure DevOps, Jenkins
  • CI/CD security controls
  • Kubernetes and container platforms
  • Infrastructure as Code security

AI Security

  • AI Secure SDLC
  • LLM and Agent security concepts
  • Prompt injection and model misuse risks
  • Secure AI application development
  • AI supply chain security and model governance

Work in a way that works for you.

We recognize that everyone is different and that the way in which people want to work and deliver at their best is different for everyone too. In this role, we can offer the following flexible working patterns:

  • Working remotely from home or any other office location, provided you visit the office when needed.
  • Working flexible hours - flexing the times when you work in the day to help you fit in everything in and work when you are the most productive.

Working with us

Our people are at the heart of what we do at Baker Hughes. We know we are better when all our people are developed, engaged and able to bring their whole authentic selves to work. We invest in the health and well-being of our workforce, train and reward talent and develop leaders at all levels to bring out the best in each other.
 

Working for you

Our inventions have revolutionized energy for over a century. But to keep going forward tomorrow, we know we must push the boundaries today. We prioritize rewarding those who embrace change with a package that reflects how much we value their input. Join us, and you can expect:

  • Contemporary work-life balance policies and well-being activities
  • Comprehensive private medical care options
  • Safety net of life insurance and disability programs
  • Tailored financial programs.
  • Additional elected or voluntary benefits

 Digital Technology Specialist - Product Security

About Us

With operations in over 120 countries, we provide better solutions for our customers and richer opportunities for our people. As a leading partner to the energy industry, we are committed to achieving net-zero carbon emissions by 2050 and we are always looking for the right people to help us get there. People who are as passionate as we are about making energy safer, cleaner, and more efficient.
 

Join Us

Are you seeking an opportunity to make a real difference in a company with global reach and exciting services and clients? Come join us and grow with a team of people who will energize and inspire you!

The Baker Hughes internal title for this role is: Digital Technology Specialist - Product Security

Apply once. Then go straight to the hiring manager.

After you apply, unlock the direct contact details of the people who actually make the call. A quick follow-up makes you 5x more likely to land an interview.

MR

Marcus Rivera

Chief Revenue Officer

m.rivera@company.com
linkedin.com/in/marcusrivera
Unlocked after you apply
·

Digital Media Specialist Related jobs

Other jobs at Baker Hughes

Premium

Reach out to the hiring manager directly.

Gain access to the contact details of the hiring managers who actually decide, and reach out to network with them directly. That, plus more when you upgrade:

  • Full match report with fit score and gaps
  • Career diagnostics on how recruiters read you
  • Curated company matches and warm intros
  • 48h early access to new roles

Cancel anytime.