Key Skills: Java, Threat Modeling, Application Security, SDLC, CICD, Secure Code Review, DAST, AWS, Cloud Security, Rest API, Containerization (Docker, Kubernetes), Azure Devops

Roles and Responsibilities:

- Provide application security guidance across application design, development, testing, and deployment activities.

- Conduct secure code reviews for Java applications, Spring Boot services, and REST APIs, and recommend practical remediation measures.

- Perform threat modeling and architecture reviews to identify application risks and establish secure design controls.

- Analyze DAST, penetration testing, vulnerability assessment, and software security findings; help teams prioritize and resolve issues.

- Promote DevSecOps practices by supporting automated security testing, vulnerability scanning, and security controls within delivery workflows.

Skills Required:

- 5 - 10 years of relevant experience in application security,



secure software development, or DevSecOps.

- Hands-on application security experience across the software development lifecycle, with strong knowledge of secure development practices.

- Solid Java and Spring Boot understanding, including the ability to assess application architecture and backend services.

- Practical experience performing secure code reviews and threat modeling for enterprise applications.

- Experience with DAST and interpreting security findings to drive vulnerability remediation.

Good to Have

- Experience with cloud security across AWS or Azure DevOps environments.

- Understanding of REST API security and containerization technologies such as Docker and Kubernetes.

Education: Any Graduate or Postgraduate degree.

📌 Application Security Analyst (Bengaluru)
🏢 Careernet
📍 Bengaluru