Key Skills: Java, Threat Modeling, Application Security, SDLC, CICD, Secure Code Review, DAST, AWS, Cloud Security, Rest API, Containerization (Docker, Kubernetes), Azure Devops

Roles and Responsibilities:
Provide application security guidance across application design, development, testing, and deployment activities.
Conduct secure code reviews for Java applications, Spring Boot services, and REST APIs, and recommend practical remediation measures.
Perform threat modeling and architecture reviews to identify application risks and establish secure design controls.
Analyze DAST, penetration testing, vulnerability assessment, and software security findings; help teams prioritize and resolve issues.
Promote DevSecOps practices by supporting automated security testing, vulnerability scanning, and security controls within delivery workflows.

Skills Required:
5 - 10 years of relevant experience in application security,



secure software development, or DevSecOps.
Hands-on application security experience across the software development lifecycle, with strong knowledge of secure development practices.
Solid Java and Spring Boot understanding, including the ability to assess application architecture and backend services.
Practical experience performing secure code reviews and threat modeling for enterprise applications.
Experience with DAST and interpreting security findings to drive vulnerability remediation.

Valuable to Have:
Experience with cloud security across AWS or Azure DevOps settings.
Understanding of REST API security and containerization technologies such as Docker and Kubernetes.

Education: Any Graduate or Postgraduate degree.

📌 Application Security Analyst Bengaluru (India)
🏢 MyCareernet
📍 India