Principal Product Security Engineer
Blackhawk Network (company site, opens in a new tab)10+ yrsBengaluruOn-siteDirect career pageEst. 40–60 LPA
Posted 1d ago
Reach people at Blackhawk Network
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at Blackhawk Network you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Lead offensive security assessments of payment transactions, authentication flows and APIs, including payment abuse, transaction manipulation and business-logic exploits.
- Build automated attack simulations and custom tools to test defenses against carding, credential stuffing, account takeovers, checkout abuse and API fraud at scale.
- Work with fraud, product security and risk teams to identify control gaps; deliver remediation-focused findings and mentor junior testers.
Minimum Requirements
- Work Experience Required: 10+ years in offensive security, penetration testing or red teaming.
- Strong experience with payment systems, financial fraud tactics and transaction-level attack surfaces; prior fintech, digital banking or payment gateway experience is specified.
- Scripting and automation proficiency (for example, Python, JavaScript, Go or Bash) to simulate attacker workflows at scale.
- In-depth knowledge of fintech payment technologies and attacker techniques such as carding, rate-limit bypass, fraud-filter evasion and web/app logic abuse.
Ideal Candidate Profile
- Has hands-on experience testing payment flows and fraud defenses, including real-time risk scoring or fraud defense pipelines; familiarity with relevant standards, frameworks and security tools is a plus.
- Can build scalable attacker simulations and translate technical findings into clear risk impact and remediation guidance for technical and non-technical stakeholders.
- Fits a principal-level role leading assessments and mentoring testers; the JD also values demonstrated use of AI tools to improve work or processes and deliver measurable results.