Join Strategy s IT Security group as an Application Security Engineer and play a crucial role in safeguarding Strategy s software applications while using up-to-date security and AI tooling. In this position, you will be responsible for integrating security practices throughout the software development lifecycle, ensuring that our software products are resilient against vulnerabilities.

- Secure SDLC Integration: Work closely with development teams to integrate security into the SDLC, including threat modeling, secure code reviews, and security testing .
- Vulnerability Management: Identify, triage, and remediate security vulnerabilities through static and dynamic application security testing (SAST/DAST) and software composition analysis (SCA ) tools.
- Security Assessments Penetration Testing: Conduct manual and automated penetration testing of web, mobile, and cloud applications to detect security flaws.
- Secure Code Review:



Analyze source code and provide security recommendations to developers to ensure adherence to secure coding best practices.
- Threat Modeling Risk Analysis: Perform threat modeling to anticipate potential attack vectors and improve security architecture.
- DevSecOps Enablement: Support and enhance DevSecOps initiatives by integrating security automation within CI/CD pipelines.
- Incident Response Remediation: Assist in investigating security incidents related to applications and work with engineering teams to remediate threats.
- Security Awareness Training: Educate and mentor developers on OWASP Top 10, SANS 25, and other security best practices .
- Bachelor s degree in Computer Science, Engineering, or related field
- Minimum 2 years of software development or software security experience in an agile environment
- Hands-on experience.

📌 Application Security Engineer (Pune)
🏢 Microstrategy
📍 Pune