Role & responsibilities Required Skills & Experience
Application Security & DevSecOps

- Experience performing manual and automated SAST assessments.
- Strong understanding of web application vulnerabilities and OWASP Top 10.
- Hands-on experience implementing security controls in CI/CD pipelines.
- Experience with:
- Secret Scanning
- SAST
- SCA
- DAST
- Infrastructure as Code
- Compliance as Code
- Vulnerability Management

- Acunetix
- HP WebInspect
- HCL AppScan
- BurpSuite

Static Application Security Testing (SAST)

- CheckMarx
- Snyk
- Fortify Static Code Analyzer
- Veracode
- Coverity
- IBM AppScan Source

DevOps & SCM

- Experience developing DevSecOps CI/CD pipelines using open-source tools.
- Experience with SCM platforms:
- GitHub
- GitLab
- Bitbucket

- Knowledge of integrating SCM tools with CI/CD pipelines using:

- Webhooks
- GitHub Actions




- Automation workflows

- Strong scripting/programming skills in:

- Python
- PowerShell
- Java
- Perl

- Familiarity with:

- JavaScript
- Angular

- Solid knowledge of:

- Windows
- Linux
- UNIX

- Strong understanding of Secure SDLC practices.
- Experience performing security analysis on web applications and APIs.
- Understanding of agile software development methodologies and security best practices.
- Knowledge of software supply chain vulnerabilities and secure development methodologies.
- Strong communication and stakeholder management skills.
- Strong Excel and PowerPoint skills.

Preferred candidate profile

📌 Appsec Engineer (Telangana)
🏢 Mavenlink Solutions
📍 Telangana