Role Description

:

Application security engineer will be executing automated application Security tools for security weaknesses, performing vulnerability scans, managing security tools and providing security guidance to software development teams.

Responsibilities

- Execute automated SAST and SCA scans to identify security vulnerabilities in web, API, and mobile applications.

- Perform manual secure code reviews to validate findings and detect security issues not identified by automated tools.

- Analyze vulnerability scan results, prioritize risks, and provide remediation recommendations to development teams.

- Collaborate with developers to resolve security issues and promote secure coding best practices.

- Integrate application security testing into the Software Development Life Cycle (SDLC) to ensure security is embedded throughout development.

- Manage application security tools, perform re-validation of fixes, and support continuous improvement of the organization's application security posture.

Key Skills Required

- Expertise in automating secure coding tools and processes (SAST, SCA, DAST, Mobile & API Security).

- Review security test results from vulnerability scans,



penetration testing for true positives and propose appropriate remediation measures or mitigation control.

- Experience with programming languages such as Java, Python, or Go, and at least one scripting language.

- Knowledge on WAF.

- Knowledge of web, mobile, API, Microservices and network pen testing.

- Knowledge of security best practices, principles, and common security frameworks, such as NIST and OWASP,

etc.

- Knowledge of current and emerging security technologies, threats and techniques for exploiting security vulnerabilities.

- Knowledge of AWS, Azure, Google cloud or Oracle is preferable.

- Knowledge on securing container platforms such as docker and Kubernetes.

- Ability to interact with a broad cross-section of personnel to explain and enforce security measures.

- Valuable written and verbal communication skills.

Education & Experience

- Bachelor's degree in Computer science, Information Technology, Cyber Security, or related discipline or equivalent experience.

- 4 to 6 years of Application Security experience with knowledge on security tools and vulnerabilities.

- Certifications:

- CSSLP

- GWAPT

- CEH

- CISSP

- CCSP

📌 Infosec Engineer IV (Bengaluru)
🏢 7-Eleven Global Solution Center – India
📍 Bengaluru