Key Responsibilities
- Design and implement application security controls across the software development lifecycle.
- Conduct security reviews and promote secure coding and secure design principles.
- Identify and remediate application vulnerabilities based on OWASP Top 10 and industry security standards.
- Integrate application security tools such as Snyk, Checkmarx, Fortify, and SonarQube into development workflows.
- Implement and manage Identity and Access Management (IAM) solutions.
- Work with OAuth 2.0 and OpenID Connect for authentication and authorization.
- Implement encryption and security controls for applications and data.
- Collaborate with network and infrastructure teams on firewalls, HTTPS, TLS, and network security.
- Secure applications and workloads across AWS, Azure, or GCP environments.
- Integrate security checks into CI/CD and DevSecOps pipelines.
- Support container security initiatives involving Docker and Kubernetes.
- Identify security risks, conduct root-cause analysis, and recommend remediation strategies.
- Work with development, DevOps, infrastructure, and business stakeholders to strengthen the organization's security posture.
- Contribute to Zero Trust and modern application security initiatives.
Mandatory Skills
- Application Security, Secure Coding & Secure Design, OWASP Top 10
- IAM (4+ years), Cloud Platforms (3+ years)
- OAuth 2.0, OpenID Connect, Encryption Techniques
- Snyk / Checkmarx / Fortify / SonarQube
- DevSecOps & CI/CD Security, Network Security, HTTPS / TLS
- AWS / Azure / GCP Security
Preferred Skills
- Container Security (Docker, Kubernetes), Zero Trust Architecture, Modern Security Frameworks
- Security certifications such as CISSP, CEH, or CSSLP
Preferred Candidate Profile
- Solid hands-on experience in application and cloud security.
- Proven experience implementing IAM and authentication solutions.
- Strong understanding of security vulnerabilities and remediation techniques.
- Excellent analytical and problem-solving skills.
- Strong communication and stakeholder-management capabilities.
- Ability to collaborate effectively with engineering, DevOps, cloud, and security teams
(ref:hirist.tech)
📌 Deltacubes - Application Security Engineer (Itanagar)
🏢 De
📍 Itanagar