This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Application Security Engineer based in India.
This role offers the opportunity to strengthen the security foundation of modern web and API-based applications within a technology-driven environment.
You will play a key role in embedding security practices throughout the software development lifecycle and improving application resilience.
Working closely with engineering teams, you will identify vulnerabilities, optimize security tooling, and support timely remediation efforts.
The position combines hands-on application security expertise with collaboration across development and operations teams.
You will contribute to secure architecture decisions, vulnerability management, and offensive security initiatives.
This is an ideal opportunity for a security professional who enjoys solving complex challenges and helping organizations build safer digital solutions.
Accountabilities:
As an Application Security Engineer, you will be responsible for improving application security practices, managing security tools, and helping engineering teams proactively identify and address risks. You will support secure software development processes while driving continuous improvements in vulnerability management and security operations.
- Provide application security engineering support for web and API-based applications.
- Integrate security controls into the Secure Software Development Lifecycle (SDLC), including threat modeling and security design reviews.
- Administer and optimize vulnerability scanning tools by configuring policies, schedules, and detection settings.
- Implement and maintain SAST and DAST solutions within CI/CD pipelines to improve security testing coverage.
- Collaborate with engineering teams to interpret security findings and drive effective remediation.
- Identify, validate, and prioritize vulnerabilities based on technical severity and business impact.
- Perform manual security testing, offensive security techniques, and proof-of-concept exploit validation when required.
- Conduct security assessments across applications and APIs, reproducing reported issues and verifying remediation effectiveness.
- Document attack paths, vulnerabilities, remediation steps, and security recommendations clearly.
- Promote secure coding practices and strengthen overall application security maturity.
Requirements:
The ideal candidate has strong application security experience, hands-on knowledge of modern security tools, and the ability to collaborate effectively with development teams. You should have experience securing web applications, APIs, and software delivery environments.
- Bachelor’s degree in Computer Science, Information Security, or a related technical field.
- 3–6 years of experience in Application Security or a related cybersecurity discipline.
- Hands-on experience with SAST, DAST, vulnerability scanning, and security testing tools.
- Strong understanding of OWASP Top 10, web application security, and API security principles.
- Experience integrating security practices into CI/CD pipelines such as Jenkins, GitHub Actions, or GitLab.
- Knowledge of secure coding practices and common vulnerability patterns.
- Experience with vulnerability discovery, risk analysis, and remediation processes.
- Familiarity with scripting languages such as Python or Bash is a plus.
- Experience with threat modeling and secure design reviews is preferred.
- Exposure to red teaming, penetration testing techniques, or offensive security practices is a plus.
- Relevant certifications such as OSCP, CEH, or GWAPT are advantageous.
- Strong analytical, problem-solving, communication, and collaboration skills.
Benefits:
- Fully remote work opportunity based in India.
- Opportunity to contribute to impactful digital transformation and security initiatives.
- Exposure to modern application security practices, tools, and technologies.
- Collaborative environment working with engineering and technology teams.
- Opportunity to strengthen expertise in secure software development and vulnerability management.
- Professional growth opportunities through challenging security projects.
- Competitive compensation package based on skills, experience, education, certifications, and business needs.
- Inclusive workplace culture focused on equal opportunity, development, and career growth.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
