Quest Global
At a Glance
As a Lead Product Security Engineer, you will be responsible for driving Product Security activities throughout the Secure Software Development Lifecycle (SSDLC), working closely with Software Architects, Development teams, DevOps, Quality Engineering, and Product Management to build secure medical products.
This role requires a strong technical background in Product Security, Application Security, Security Architecture, Threat Modeling, DevSecOps, and Vulnerability Management.
Responsibilities
Required Qualifications
Source: Quest Global careers · View original posting
Quest Global is a global engineering services provider based in Singapore, founded in 1997 by Ajit Prabhu and Aravind Melligeri. The company has grown significantly, employing over 21,000 people across 18 countries and operating from 93 centers worldwide. It is supported by major investors, including Bain Capital, Advent, and GIC. The company offers a wide range of engineering services throughout the product lifecycle, including design and modeling, analysis and prototyping, automation, and digital engineering. Quest Global has a strong focus on industries such as aerospace and defense, power generation, and oil and gas. With over two decades of experience, the company has achieved notable recognition, including being ranked #1 in Engineering Service Outsourcing by the Black Book of Outsourcing in 2009. Under the leadership of Chairman and CEO Ajit Prabhu, Quest Global fosters an inclusive culture that values the unique contributions of its employees.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
Security Team
Quest Global maintains a dedicated security function including roles such as Security Engineer and Application Security Engineer. The team is responsible for analyzing and resolving application security vulnerabilities and implementing secure coding standards. Specific organizational structure, reporting lines, and named leadership are not publicly available. - Active AppSec Job Postings (as of): Multiple roles identified including Security Engineer and QA Architect. - Common Skill/Tool Patterns: Strong emphasis on OWASP standards, SAST/DAST tools, and cloud security
Key Initiatives
Quest Global's AppSec initiatives focus on vulnerability management and the integration of security into the QA pipeline. - Security Champions Program: No public evidence found. - 'Shift Left' in Practice: The team works to "integrate security testing tools (e.g., OWASP ZAP) into the QA pipeline." - Vulnerability Management Process: Includes developing and implementing processes to "analyze and resolve application security vulnerabilities." - Secure SDLC Artifacts: Roles involve applying "coding and testing standards"and utilizing SAST/DAST tools. - Recent Initiatives: Use of AI/ML tools such as Copilot and LLM in technical workflows
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on Quest Global's site