Application Security Engineer

About the role

As an Application Security Engineer within our cybersecurity team, you will help safeguard the company’s web applications and services by supporting the integration of security practices into the Software Development Life Cycle (SDLC). You will collaborate with development, DevOps, and security teams to identify, assess, and remediate vulnerabilities, contribute to secure coding practices, and assist in implementing DevSecOps tooling and processes.

What you'll do

• Support the integration of security controls and best practices across various phases of the SDLC
• Assist in security assessments, including static and dynamic code analysis, open-source dependency analysis, and limited penetration testing
• Participate in manual and automated code reviews to identify potential vulnerabilities and coding flaws
• Collaborate with software engineers to promote secure development practices, including the use of security testing tools in CI/CD pipelines
• Contribute to the evaluation, deployment, and tuning of DevSecOps tools such as SAST, DAST, and SCA platforms

What you need

• 2–5 years in cybersecurity
• OWASP
• Penetration testing
• CI/CD
• B.Tech or B.E. or B.Sc or BCA

Good to have

• ISO 27001
• CEH
• Python
• AWS
• GCP
• Jenkins