Job Summary:

We are seeking an experienced Application Security Consultant to strengthen the security posture of enterprise applications by performing application security assessments, secure code reviews, and vulnerability management. The ideal candidate should have hands-on experience with SAST tools, secure SDLC practices, OWASP standards, and DevSecOps methodologies, along with exposure to AI/LLM security concepts.

Key Responsibilities:

- Perform application security assessments across backend, frontend, and API environments.
- Conduct secure code reviews using SAST tools and manual code analysis.
- Validate security findings by identifying true positives and eliminating false positives.
- Identify, assess, and prioritize vulnerabilities aligned with OWASP Top 10 and API Security Top 10 standards.
- Provide developers with clear, practical, and actionable remediation recommendations.
- Manage, configure, and optimize SAST tools while maintaining tool hygiene, policies, and scan data.
- Collaborate with development, DevOps, and security teams to integrate security throughout the SDLC.
- Support DevSecOps initiatives by embedding security checks into CI/CD pipelines.
- Perform vulnerability validation and assist development teams during remediation efforts.




- Stay updated with emerging application security threats, secure coding standards, and industry best practices.
- Evaluate security risks associated with Agentic AI and LLM-based applications where applicable.

Required Skills"

- 8+ years of experience in Application Security or Product Security.
- Robust experience performing application security assessments for web, enterprise, and API-based applications.
- Hands-on experience with at least one SAST tool such as Snyk, Checkmarx, Fortify, or Semgrep.
- Expertise in secure code reviews and manual source code analysis.
- Strong understanding of OWASP Top 10 and OWASP API Security Top 10 vulnerabilities.
- Experience with vulnerability management, risk assessment, and remediation tracking.
- Good understanding of secure coding practices across modern application architectures.
- Experience working with CI/CD pipelines, DevOps, and DevSecOps practices.
- Familiarity with DevOps tools and integrating security into automated deployment pipelines.
- Exposure to Agentic AI, LLM agents, and AI application security concepts.
- Strong analytical, communication, and stakeholder management skills.

📌 Application Security Consultant (Pune)
🏢 Connectio It
📍 Pune