Role & Responsibilities
Perform application security assessments using Checkmarx (SAST), Zafran, and ThreatModeler.
Build and maintain threat models to identify risks across applications and cloud environments.
Integrate AppSec tools into CI/CD pipelines and automate security checks.
Collaborate with developers and DevOps teams to remediate vulnerabilities and guide secure coding practices.
Monitor, track, and report security findings with clear mitigation plans.
Ensure alignment with OWASP, secure SDLC standards, and internal security policies.

Preferred Candidate Profile
38 years of experience in Application Security / DevSecOps.
Hands-on experience with Checkmarx, Zafran, and ThreatModeler.
Robust knowledge of SAST, threat modeling methods (STRIDE), OWASP Top 10, and secure SDLC.
Experience working with CI/CD tools (Jenkins, GitLab, Azure DevOps, etc.).
Positive understanding of at least one programming language (Java, .NET, Python, JavaScript).
Robust analytical, communication, and problem-solving skills.
Relevant certifications (CEH, Security+, CAST, or Threat Modeling) are a plus.

📌 Application Security Engineer Appsec/devsecops H Hyd Hyderabad
🏢 Cloudxtreme
📍 Hyderabad