India (Offshore) | Full-Time / Contract | 6–10+ Years
Apply Now
We are seeking an Application Security Engineer to embed security best practices across the software development lifecycle. The ideal candidate will have strong hands-on experience with application security testing, threat modeling, and DevSecOps, and will work closely with engineering, QA, and DevOps teams to identify and remediate vulnerabilities early and continuously.
Key Responsibilities
• Integrate application security controls across the SDLC (design → build → deploy)
• Perform SAST, DAST, and SCA to identify and remediate vulnerabilities
• Conduct threat modeling and secure design reviews for new and existing applications
• Validate and triage findings; partner with developers on remediation guidance
• Embed security testing into CI/CD pipelines (DevSecOps)
• Perform secure code reviews and advise on secure coding practices
• Maintain vulnerability management workflows and risk prioritization
•
• Support penetration testing activities and validate fixes
•
• Contribute to security standards, policies,
and secure SDLC documentation
•
• Track and report security metrics and risk posture to stakeholders
Required Skills & Qualifications
• 6–10+ years of experience in Application Security / Product Security
• Strong understanding of OWASP Top 10, CWE, and common web vulnerabilities
• Hands-on experience with SAST tools (Checkmarx, Fortify, SonarQube)
• Hands-on experience with DAST tools (Burp Suite, OWASP ZAP)
• Experience with SCA (dependency and license scanning)
• Working knowledge of secure coding practices in Java, .NET, JavaScript, or Python
• Experience integrating security tools into CI/CD pipelines
• Familiarity with REST APIs, authentication, and authorization mechanisms
• Solid analytical and communication skills
Good to Have
• Cloud security exposure (AWS / Azure / GCP application services)
• Experience with container and Kubernetes security
• Knowledge of secrets management and