Position Details

Role: Application Security Engineer (Cyber Security)
Employment Type: Full time
Location: Pune
Work Mode: Hybrid (3 Days WFO & 2 Days WFH)
Experience: 5+ Years
Shift Timings: 10:00 AM / 11:00 AM Start
Notice Period: Immediate to 15 Days Preferred
Communication Skills: Excellent

Job Summary

This is a development-first security role, where approximately 70% of the work involves software development and remediation and 30% focuses on security testing.

The ideal candidate will be responsible for fixing vulnerabilities directly in application code, upgrading vulnerable components, building security automation, and performing security assessments across web applications and APIs.

Key ResponsibilitiesDevelopment & Remediation
Fix vulnerabilities directly in application code.
Add test cases to validate security fixes.
Upgrade vulnerable libraries, frameworks, and third-party components.
Build security tooling and automation.
Integrate SAST, DAST, and SCA tools into CI/CD pipelines.
Harden infrastructure, cloud configurations, containers, Kubernetes, and CI/CD settings.
Drive remediation activities through to successful deployment.





Security Testing
Perform application and API security testing.
Conduct secure code reviews.
Run vulnerability assessments and prioritize findings.
Validate remediation efforts and close security findings.

Reporting & Collaboration
Prepare detailed security findings and remediation reports.
Work closely with development teams and stakeholders.
Promote secure coding practices and security awareness.

Mandatory Technical Skills
Application Security / VAPT
Secure Code Review
Vulnerability Remediation
SAST, DAST & SCA Tools
CI/CD Security
Docker & Kubernetes
REST APIs & Web Security
OAuth 2.0, OpenID Connect, JWT
Git, Pull Requests & Code Reviews
Python / Bash / PowerShell Scripting

Solid development expertise in at least two of the following:
Java
C#/.NET
JavaScript / TypeScript
Python
PHP
Go
Swift
Kotlin

Nice to Have
Burp Suite Professional
OWASP Top 10 & ASVS
Semgrep / CodeQL
Threat Modeling
Secure Design Reviews
ISO 27001 / SOC 2 / PCI DSS Compliance Exposure

📌 Application Security Engineer Cyber Security With Development Role Pune
🏢 Capabiliq It Services
📍 Pune