Information Security Engineer (Application Security)

About the role

We are seeking a highly motivated and detail-oriented Information Security Engineer to join at least 2 years of experience in the field. They will be responsible for supporting the organization's security posture by performing the work of an information security engineer, including conducting vulnerability assessments and penetration testing, developing and

What you'll do

• Implementing security policies and procedures, and collaborating with cross-functional teams
• Responsible for onboarding and implementation of GRC tools, responding to security events and incidents, and participating in threat hunting activities
• Support application security activities across the SDLC , including design, development, testing, release, and post-release review
• Work with Engineering and Security teams to identify, document, and track application security risks, including issues related to insecure design, weak access control
• Assist with reviewing application security findings, understanding risk context, coordinating with owners, and tracking remediation or accepted exceptions through closure

What you need

• 2–5 yrs of experience
• OWASP
• Risk management
• AWS
• Azure
• CI/CD
• Penetration testing
• B.Tech or B.E. or B.Sc or BCA

Good to have

• Incident response
• Vulnerability assessment
• Cloud security
• Office 365