Senior Application Security Engineer plus Vulnerability Operations

Location: India

Role Summary

Role Summary:

The Senior Application Security Engineer serves as a technical and operational leader within the Vulnerability Operations function. This role drives large scale adoption of application security controls, partnering closely with engineering teams and the Application Security Champion community to ensure secure design, development, and deployment across the enterprise. You will lead strategic control rollouts, guide vulnerability governance, address emerging threat classes, and provide expert escalation support for the most complex AppSec issues.

Key Responsibilities

Strategic Leadership and Program Enablement

Lead the enterprise wide operationalization of AppSec controls, ensuring scalable integration across CI/CD pipelines and diverse engineering settings.

Partner with the Application Security Champion team to embed secure development practices, coordinate training, share emerging vulnerability insights, and drive decentralized security ownership.





Own the tiered security control strategy (Tier 1 to 3), defining quarterly migration targets and ensuring cross portfolio alignment.

Advanced Vulnerability and Threat Management

Act as subject matter expert for advanced and emerging vulnerability classes (for example supply chain risks, AI and ML application threats, container and serverless misconfigurations, emerging OWASP categories).

Lead complex vulnerability triage and remediation efforts; facilitate cross team deep dive sessions to drive prioritization and timely mitigation.

Conduct proactive threat modeling and security design reviews for high risk or business critical applications.

Automation and CI/CD Security Architecture

Architect scalable CI/CD integrations for SAST, DAST, SCA, and secrets scanning using policy as code, automated gating, and risk based controls.

Implement and optimize Tier 3 merge prevention and build failure gates,

📌 Asst Manager Bengaluru
🏢 Mphasis
📍 Bengaluru