Please share CV to with the below details: Total Experience- Should be 6 years Current CTC- Expected CTC- Notice period- Location- Mandatory skills- hands-on experience in penetration testing,SAST,DAST,SCA and threat modelling. Application Security Engineer/Lead- Requirement- Hands-on experience in Threat Modelling using STRIDE for identifying attack vectors, trust boundaries, and mitigation strategies. Strong practical experience in secure code review, vulnerability remediation, and security testing across contemporary applications. Hands-on experience identifying and exploiting OWASP Top 10 vulnerabilities across Web, API, and LLM-based applications. Practical implementation experience with OAuth 2.0, OpenID Connect (OIDC), JWT security, and cryptographic controls. Hands-on exposure to Responsible AI, AI/ML threat modelling, prompt injection testing, and LLM security controls. Experience securing software supply chains, CI/CD pipelines, containers, and cloud-native platforms. Practical experience performing penetration testing, vulnerability assessments, and remediation validation.



Hands-on experience with SAST, DAST, SCA/Open Source scanning, and code quality/code smell management tools. Strong working knowledge of AWS, Azure, and GCP native security services and cloud security best practices. Hands-on experience securing Kubernetes and container platforms, including image security, cluster hardening, admission controls, and runtime threat detection/response. Hands-on experience managing the PSIRT lifecycle, including vulnerability intake, triage, impact assessment, remediation coordination, disclosure and customer communication. Responsibilities- Lead and Manage Secure Design review and Thread modelling for Applications ( On premise and SaaS based Applications) Develop and implement comprehensive security strategies to safeguard application systems. Define security best practices and standards and Lead Secure Software Development Lifecycle best practices and standards

📌 Application Security Engineer (Karnataka)
🏢 HCLSoftware
📍 Karnataka