Job Description

We are looking for an experienced Application Security Engineer / Architect to drive application security across the Secure Software Development Life Cycle (SSDLC). The candidate should have robust experience in threat modeling, secure code reviews, vulnerability management, API security, DevSecOps, and application penetration testing.

Key Responsibilities
Integrate security controls and requirements into SSDLC.
Perform threat modeling and security architecture reviews.
Conduct and manage SAST, DAST, and Software Composition Analysis (SCA).
Review source code and validate security findings.
Assess web applications, APIs, microservices, authentication, and authorization mechanisms.
Identify and remediate OWASP Top 10 and API security vulnerabilities.
Conduct or support application and API penetration testing.
Collaborate with development teams to drive remediation and secure coding practices.




Implement DevSecOps security controls within CI/CD pipelines.
Define AppSec standards, governance, security tooling strategy, and reference architectures (Architect role).
Mandatory Skills
Application Security (AppSec)
SSDLC
Threat Modeling
Secure Code Review
SAST, DAST, SCA
OWASP Top 10
API Security
Vulnerability Management
Application Penetration Testing
DevSecOps

Preferred Tools
Checkmarx
Veracode
Fortify
Semgrep
SonarQube
Burp Suite
OWASP ZAP
Invicti / Acunetix
Snyk
Black Duck
Mend
JFrog Xray
Dependabot
Jira
ServiceNow
DefectDojo

Preferred Technical Background

Experience with one or more:
Java
.NET / C#
Python
JavaScript / Node.js
Go

📌 Application Security Engineer / Architect Hyderabad
🏢 Infosys
📍 Hyderabad