Application Security Engineer

3 weeks ago

Bengaluru, Karnataka, India RemoteStar Full time
Job Description

About the client:

Our Client is a global technology company, home to more than 220,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services.

Experience: 6-12 years

Mode of working: Hybrid (3 Days from Office)

Location: Bengaluru / Noida / Pune

Roles and Responsibilities:

- Lead and Manage Secure Design review and Thread modelling for Applications ( On premise and SaaS based Applications)
- Develop and implement comprehensive security strategies to safeguard application systems.
- Define security best practices and standards and Lead Secure Software Development Lifecycle best practices and standards.
- Oversee security incident response and mitigation efforts, ensuring quick and efficient handling of security breaches or threats.
- Conduct regular penetration testing, Red team exercise, security assessments and audits to identify vulnerabilities and implement corrective measures.
- Collaborate with application stakeholders to develop security roadmaps and participate in daily stand-ups to align security initiatives with organizational goals.
- Foster a culture of continuous improvement in Application security including Development,Supply chain security and AI/ML
- Experience in managing Business Continuity and Crisis management
- Staying up-to-date on the latest Application security technologies, trends, and best practices.
- A strong understanding of cloud computing technologies, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS).
- Knowledge of security frameworks such as SANS,OWASP, NIST and ISO Framework.
- Certifications such as Certified Secure Software Lifecycle Professional (CSSLP), Certified Information Systems Security Professional (CISSP), or Certified Cloud Architect (CCA) are preferred.
- Extensive knowledge and experience with developing Cloud Security Frameworks using industry best practices such as those from the Cloud Security Alliance (CSA) and NIST CSF and regulatory requirements such as HIPAA, HITrust and PCI or closely related.
- Understanding of industry regulatory and compliance requirements (i.e., FedRAMP, PCI-DSS, NIST, HIPAA) and skilled at interpreting the compliance and security requirements into implementable and repeatable controls

Skills and Qualifications:

- Threat Modelling - STRIDE
- Proficiency in reading, writing, and auditing code and the ability to learn new languages/technologies including but not limited to - C#,.Net,.Net Core, Python,NodeJS,Javascript,VueJS.
- Experience with OWASP Top10 or SANS Top 25
- Knowledge of OAuth 2.0/OpenID Connect/ Cryptography
- Knowledge of Responsible AI and ML Security.
- Knowledge of Supply chain, Secure build and Container platform security.
- Knowledge of Pen Testing and Vulnerability assessment platform
- Knowledge of SAST/DAST/Open Source/Code quality/Code Smell management tools
- AWS,Azure and GCP Native Security service awareness

  • Application Security Engineer

    4 days ago

    Bengaluru, Karnataka, India beBeeSecurity Full time ₹ 15,00,000 - ₹ 25,00,000

    Job Title: Application Security EngineerWe are seeking an experienced Application Security Engineer to drive secure software development life cycles across various teams. The ideal candidate will have hands-on expertise in Secure SDLC practices, Secure Code Reviews, and Software Composition Analysis (SCA) & Threat Modeling.Key Responsibilities:Develop and...

  • Application Security Engineer

    4 weeks ago

    Bengaluru, Karnataka, India Coders Brain Technology Private Limited Full time

    Were Hiring : WebPTP1 - ConsultantLocation : Bangalore/PuneExperience : 4-8 YearsSalary : As per market standardEmployment Type : Full-TimeJoining : the Role : We are seeking a skilled Application Security Engineer / Penetration Tester to perform both automated and manual security testing on applications, APIs, and networks. You will work closely with...

  • Senior Application Security Engineer

    13 hours ago

    Bengaluru, Karnataka, India TechBlocks Full time

    About Us:Techblocks is a leading global digital product development firm. We unify strategy, design and technology with continuous growth-centric digital product engineering solutions for F500 companies and global brands, including Bell Telecom, Bausch Health (Previously Valeant Pharma), Honda Motors, AES Corp, Thomson Reuters Carswell, First American and...

  • Application Security Specialist

    3 hours ago

    Bengaluru, Karnataka, India beBeeSecurity Full time ₹ 1,50,00,000 - ₹ 2,00,00,000

    Job Title:Senior Application Security Engineer">Our company is looking for a skilled Senior Application Security Engineer to join our team.">About the Role:We are seeking an experienced Senior Application Security Engineer who can assist in securing our applications and infrastructure. The ideal candidate will have a strong background in security, with...

  • Senior Application Security Engineer

    3 weeks ago

    Bengaluru, Karnataka, India Tide Platform Full time

    ABOUT TIDEAt Tide we are building a finance platform designed to save small businesses time and money We provide our members with business accounts and related banking services but also a comprehensive set of connected administrative solutions from invoicing to accounting Launched in 2017 Tide is now used by over 1 million small businesses across the...

  • Application Security Manager

    3 days ago

    Bengaluru, Karnataka, India Pearson Full time US$ 1,50,000 - US$ 2,00,000 per year

    At Pearson, we are the world's learning company with over 24,000 employees across 70 countries. Our mission is to combine world-class educational content and assessment, powered by services and technology, to enable more effective teaching and personalised learning at scale. We believe that wherever learning flourishes, so do people.In this exciting and...

  • Application Security Specialist

    4 hours ago

    Bengaluru, Karnataka, India beBeeApplication Full time ₹ 1,50,00,000 - ₹ 2,50,00,000

    Securing Tomorrow's Applications with ExcellenceWe strive for innovation and excellence in digital transformation. Our vision is to become a sought-after company that helps customers realize value through groundbreaking solutions.A Perfect Match for Ambitious ProfessionalsAs a key member, you will work closely with teams to deliver top-notch results and...

  • Staff Application Security Engineer

    3 weeks ago

    Bengaluru, Karnataka, India Ivanti Full time

    Job DescriptionWho We AreIn todays work environment, employees use a myriad of devices to access IT applications and data over multiple networks to stay productive, wherever and however they work. Ivanti elevates and secures Everywhere Work so that people and organizations can thrive.While our headquarters is in the U.S., half of our employees and customers...

  • Staff Application Security Engineer

    12 hours ago

    Bengaluru, Karnataka, India Ivanti Full time US$ 1,00,000 - US$ 1,50,000 per year

    Who We AreIn today's work environment, employees use a myriad of devices to access IT applications and data over multiple networks to stay productive, wherever and however they work. Ivanti elevates and secures Everywhere Work so that people and organizations can thrive.While our headquarters is in the U.S., ha...

  • Chief Application Security Strategist

    4 days ago

    Bengaluru, Karnataka, India beBeeApplication Full time

    Senior Application Security EngineerPearson is seeking a highly motivated and experienced Senior Application Security Engineer with a strong background in DevOps, Application Security, and Cloud Security. This role will play a crucial part in leading and supporting the integration of security controls into CI/CD pipelines and cloud environments.Key...