Location: Bengaluru, India

Years of Experience: 12+ years

Job Summary

We are seeking a highly skilled Principal Security Engineer with extensive experience in Application Security, Cloud Security, and DevSecOps. The ideal candidate will have a proven track record in enterprise and regulated environments, demonstrating expertise in vulnerability assessment and penetration testing (VAPT), threat modeling, and secure software development lifecycle (SDLC) implementation. This role requires a hands-on approach to integrating security into CI/CD pipelines and collaborating with cross-functional teams to ensure secure application deployments.

Responsibilities

- Conduct comprehensive vulnerability assessments and penetration testing across applications, APIs, web, mobile, and thick-client environments.
- Implement secure SDLC practices aligned with industry standards such as OWASP Top 10, NIST, ISO 27001, PTES, and ASVS.
- Perform threat modeling using STRIDE methodology to identify and mitigate potential security risks.
- Manage the vulnerability lifecycle, including identification, remediation, and reporting of security issues.
- Conduct architecture security reviews to ensure compliance with security best practices.
- Integrate security tools (SAST/DAST) into CI/CD pipelines using GitHub Actions and DevSecOps methodologies.
- Provide guidance on cloud and container security, specifically with Docker and Kubernetes.
- Collaborate with engineering,



infrastructure, and business stakeholders to develop secure, scalable, and compliant enterprise solutions.

Mandatory Skills

- Strong knowledge and experience in Application Security.
- 12+ years of experience in Application Security, Cloud Security, and DevSecOps.
- Hands-on experience with SAST/DAST tools such as Fortify SCA/SSC, Checkmarx, Burp Suite, Invicti (Netsparker), Qualys, and Nessus.
- Proven ability to manage vulnerability lifecycle and perform architecture security reviews.
- Experience in integrating security into CI/CD pipelines.
- Strong background in cloud and container security.

Preferred Skills

- Experience with compliance and risk management frameworks.
- Familiarity with secure application deployment practices.
- Excellent communication and leadership skills.

Qualifications

- Bachelors degree in Computer Science, Information Security, or a related field.
- Relevant security certifications (e.g., CISSP, CISM, CEH) are a plus.

If you are a proactive and experienced security professional looking to make a significant impact in a agile environment, we encourage you to apply.

Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 TECHNICAL LEAD - Application Security (Bengaluru)
🏢 Happiest Minds Technologies
📍 Bengaluru