Job DescriptionPlease share CV to with the below details:
nTotal Experience- Should be 6+ years
nCurrent CTC-
nExpected CTC-
nNotice period-
nLocation-
n

nMandatory skills- hands-on experience in penetration testing,SAST,DAST,SCA and threat modelling.
n

nApplication Security Engineer/Lead-
nRequirement-
n
n
Hands-on experience in Threat Modelling using STRIDE for identifying attack vectors, trust boundaries, and mitigation strategies.n
Solid practical experience in secure code review, vulnerability remediation, and security testing across contemporary applications.n
Hands-on experience identifying and exploiting OWASP Top 10 vulnerabilities across Web, API, and LLM-based applications.n
Practical implementation experience with OAuth 2.0, OpenID Connect (OIDC), JWT security, and cryptographic controls.n
Hands-on exposure to Responsible AI, AI/ML threat modelling, prompt injection testing, and LLM security controls.n
Experience securing software supply chains, CI/CD pipelines, containers, and cloud-native platforms.n




Practical experience performing penetration testing, vulnerability assessments, and remediation validation.n
Hands-on experience with SAST, DAST, SCA/Open Source scanning, and code quality/code smell management tools.n
Solid working knowledge of AWS, Azure, and GCP native security services and cloud security best practices.n
Hands-on experience securing Kubernetes and container platforms, including image security, cluster hardening, admission controls, and runtime threat detection/response.n
Hands-on experience managing the PSIRT lifecycle, including vulnerability intake, triage, impact assessment, remediation coordination, disclosure and customer communication.n

n

nResponsibilities-
n
n
Lead and Manage Secure Design review and Thread modelling for Applications ( On premise and SaaS based Applications)n
Develop and implement comprehensive security strategies to safeguard application systems.n
Def

📌 Application Security Engineer Vasanthanagar
🏢 HCLSoftware
📍 Vasanthanagar