Job Description

We are looking for an experienced Application Security Engineer / Architect to drive application security across the Secure Software Development Life Cycle (SSDLC). The candidate should have robust experience in threat modeling, secure code reviews, vulnerability management, API security, DevSecOps, and application penetration testing.

Key Responsibilities

- Integrate security controls and requirements into SSDLC.
- Perform threat modeling and security architecture reviews.
- Conduct and manage SAST, DAST, and Software Composition Analysis (SCA).
- Review source code and validate security findings.
- Assess web applications, APIs, microservices, authentication, and authorization mechanisms.
- Identify and remediate OWASP Top 10 and API security vulnerabilities.
- Conduct or support application and API penetration testing.
- Collaborate with development teams to drive remediation and secure coding practices.




- Implement DevSecOps security controls within CI/CD pipelines.
- Define AppSec standards, governance, security tooling strategy, and reference architectures (Architect role).
- Mandatory Skills

- Application Security (AppSec)
- SSDLC
- Threat Modeling
- Secure Code Review
- SAST, DAST, SCA
- OWASP Top 10
- API Security
- Vulnerability Management
- Application Penetration Testing
- DevSecOps

Preferred Tools

- Checkmarx
- Veracode
- Fortify
- Semgrep
- SonarQube
- Burp Suite
- OWASP ZAP
- Invicti / Acunetix
- Snyk
- Black Duck
- Mend
- JFrog Xray
- Dependabot
- Jira
- ServiceNow
- DefectDojo

Preferred Technical Background

Experience with one or more:

- Java
- .NET / C#
- Python
- JavaScript / Node.js
- Go

📌 Application Security Engineer / Architect (Hyderabad)
🏢 Infosys
📍 Hyderabad