Planned for Conversion to FTE

Task Description: Security Architect / Application Security Engineer
We are looking for a hands-on Security Engineer/Architect to embed Security by
Design into our applications and work directly with development teams and
senior technical stakeholders.
Key responsibilities:
• Review, validate, categorize and prioritize findings from Checkmarx, Fortify,
penetration tests, SAST/DAST and other security tools, distinguishing real
vulnerabilities from false positives.
• Perform hands-on penetration testing, vulnerability analysis, threat
modeling, secure code reviews and attack-path analysis.
• Design and review secure application architectures, APIs, integrations,
authentication/authorization, data flows and cloud components.
• Define and validate remediation of security findings and challenge proposed
fixes where the underlying risk is not adequately addressed.
• Work directly with developers, architects and the CISO to establish security
requirements and drive Security by Design.
• Use automation and AI to improve vulnerability analysis, remediation and
application security.
Required skills:
• Strong hands-on Application/Product Security or Security Engineering
background.
• Practical ethical hacking and penetration-testing experience; able to
reproduce and exploit vulnerabilities, not just report them.

Responsibilities

Planned for Conversion to FTE

Task Description:



Security Architect / Application Security Engineer
We are looking for a hands-on Security Engineer/Architect to embed Security by
Design into our applications and work directly with development teams and
senior technical stakeholders.
Key responsibilities:
• Review, validate, categorize and prioritize findings from Checkmarx, Fortify,
penetration tests, SAST/DAST and other security tools, distinguishing real
vulnerabilities from false positives.
• Perform hands-on penetration testing, vulnerability analysis, threat
modeling, secure code reviews and attack-path analysis.
• Design and review secure application architectures, APIs, integrations,
authentication/authorization, data flows and cloud components.
• Define and validate remediation of security findings and challenge proposed
fixes where the underlying risk is not adequately addressed.
• Work directly with developers, architects and the CISO to establish security
requirements and drive Security by Design.
• Use automation and AI to improve vulnerability analysis, remediation and
application security.
Required skills:
• Robust hands-on Application/Product Security or Security Engineering
background.
• Practical ethical hacking and penetration-testing experience; able to
reproduce and exploit vulnerabilities, not just report them.

Qualifications

Any degree

📌 Security Architect / Application Security Engineer (India)
🏢 Terrabit Consulting- India
📍 India