Essential Functions

- Engineer tooling for security initiatives
- Hands on experience with SAST, SCA, DAST
- Hands on experience and understanding of API Security, SaaS Security • Experience with Threat Modeling
- Manage penetration testing, and potential red team engagements
- Review developed source code for vulnerabilities
- Provide guidance to Software and Systems Engineers to secure systems and code
- Analyze, test, debug and discover security flaws or vulnerabilities in software, networks, systems, and applications
- Assess systems to identify and mitigate risk and vulnerabilities
- Test existing and recent technologies for security vulnerabilities
- Review requested changes for equipment, technology and software which are planned for deployment
- Work closely with development, operations, information security, and network teams to craft and enforce security policies as it relates to DevOps, Infrastructure, and Software
- Responds to security incidents




- Work with IT and Development to develop secure solutions to reduce attack surfaces
- Analyze and harden existing infrastructure, automation, and deployment processes
- Ensure security best practices are implemented and followed
- Participate in the regular on-call rotation and handle identified incidents during their shift

Qualifications:

One or more of the following certifications is strongly preferred:

- CISSP
- CCSK
- CEH
- Vendor Certifications (e.g. AWS)
- GIAC/ GSEC

Requirements:

Total experience of 8+ years in Information Security with experience in the following:

- Application security testing and vulnerability review
- Secure software development
- SAST, SCA, DAST, API Security, SaaS Security
- Prior experience with Snyk is a strong plus
- Pipeline integrations
- Threat Modeling
- *nix
- Cloud security

📌 Sr Application Security Engineer (Hyderabad)
🏢 Caps Talent Technologies
📍 Hyderabad