Position Details

Role: Application Security Engineer (Cyber Security)

Employment Type: Full-Time

Location: Pune

Work Mode: Hybrid (3 Days WFO & 2 Days WFH)

Experience: 5+ Years

Shift Timings: 10:00 AM / 11:00 AM Start

Notice Period: Immediate to 15 Days Preferred

Communication Skills: Excellent

Job Summary

This is a development-first security role, where approximately 70% of the work involves software development and remediation and 30% focuses on security testing.

The ideal candidate will be responsible for fixing vulnerabilities directly in application code, upgrading vulnerable components, building security automation, and performing security assessments across web applications and APIs.

Key ResponsibilitiesDevelopment & Remediation

- Fix vulnerabilities directly in application code.
- Add test cases to validate security fixes.
- Upgrade vulnerable libraries, frameworks, and third-party components.
- Build security tooling and automation.
- Integrate SAST, DAST, and SCA tools into CI/CD pipelines.
- Harden infrastructure, cloud configurations, containers, Kubernetes, and CI/CD environments.
- Drive remediation activities through to successful deployment.





Security Testing

- Perform application and API security testing.
- Conduct secure code reviews.
- Run vulnerability assessments and prioritize findings.
- Validate remediation efforts and close security findings.

Reporting & Collaboration

- Prepare detailed security findings and remediation reports.
- Work closely with development teams and stakeholders.
- Promote secure coding practices and security awareness.

Mandatory Technical Skills

- Application Security / VAPT
- Secure Code Review
- Vulnerability Remediation
- SAST, DAST & SCA Tools
- CI/CD Security
- Docker & Kubernetes
- REST APIs & Web Security
- OAuth 2.0, OpenID Connect, JWT
- Git, Pull Requests & Code Reviews
- Python / Bash / PowerShell Scripting

Strong development expertise in at least two of the following:

- Java
- C#/.NET
- JavaScript / TypeScript
- Python
- PHP
- Go
- Swift
- Kotlin

Nice to Have

- Burp Suite Skilled
- OWASP Top 10 & ASVS
- Semgrep / CodeQL
- Threat Modeling
- Secure Design Reviews
- ISO 27001 / SOC 2 / PCI DSS Compliance Exposure

📌 Application Security Engineer (Cyber Security) with Development Role (Pune)
🏢 Capabiliq It Services
📍 Pune