Role : Application Security Engineer

Claranet is looking for an Application Security Engineer with expertise in secure code reviews, application security testing, and vulnerability analysis.

The role involves identifying vulnerabilities across applications and services, validating security findings, recommending remediation measures, and supporting Secure SDLC initiatives for global clients.

Key Responsibilities :

- Conduct manual code reviews, Software Composition Analysis (SCA), and static vulnerability scanning.
- Review web applications, web services, mobile applications, and front-end and back-end services.
- Identify and validate security vulnerabilities, including business logic flaws.
- Analyze automated scanning results, investigate false positives and false negatives, and validate findings.
- Communicate technical vulnerabilities, business risks, and remediation recommendations to clients and internal teams.
- Support development teams in resolving identified security issues.
- Contribute to Secure SDLC projects and integrate security tools into CI/CD pipelines.
- Participate in client calls, technical discussions, and project scoping activities.
- Stay updated on emerging security threats and contribute to security research, presentations, and whitepapers.





Required Skills & Qualifications :

- 4 years of experience in application security and secure code reviews.
- 2 years of client-facing consulting experience involving DAST, SAST, and SCA.
- Experience with security tools such as Checkmarx, WebInspect, Fortify, Snyk, WhiteSource, ShiftLeft, Semgrep, or CodeQL.
- Solid understanding of manual code review, business logic vulnerabilities, and the OWASP Code Review Guide.
- Knowledge of C, C , Java, and .NET.
- Experience with at least one scripting language, such as Python, Ruby, Bash, or JavaScript.
- Familiarity with Windows and Linux operating systems.
- Knowledge of CI/CD tools such as GitHub Actions, Jenkins, Azure DevOps, and GitLab CI.
- Ability to communicate complex security findings and remediation recommendations clearly.
- Strong ethical standards and a commitment to application security.

Good to Have:

- Programming experience in Java, .NET, or JavaScript.
- Familiarity with AWS, Kubernetes, Docker, and Terraform.
- Experience integrating security tools into CI/CD pipelines as part of Secure SDLC.
- Certifications such as GPEN, GXPN, GMOB, GWAPT, OSWE, OSCP, OSCE, OSWP, CNCF, or AWS certifications.

📌 Claranet - Application Security Engineer - Security Vulnerability Analysis (India)
🏢 Claranet
📍 India