Application Security Engineer

2 days ago

tamil nadu, India Novac Technology Solutions Full time

Job Description: Application Security EngineerExperience :2 to 5 yearsLocation : Alwarpet,Chennai.Job Summary:In this role, you will focus on ensuring the security of web applications, mobile applications, and APIs through a combination of proactive security testing, code review, threat modeling, and vulnerability assessments. You will work closely with development teams to integrate secure coding practices and help mitigate risks in the software development lifecycle.Key Responsibilities:Conduct regular security assessments, penetration testing, and vulnerability scans of applications and services.Perform static and dynamic analysis on web applications, mobile applications, and APIs to identify and resolve security vulnerabilities.Collaborate with engineering teams to implement secure development practices, reviewing code for security flaws and recommending improvements.Conduct threat modeling and risk assessments to identify potential security threats and implement appropriate mitigation strategies.Assist in the development and execution of security tools, procedures, and frameworks to automate security testing processes.Keep up-to-date with the latest security vulnerabilities, exploits, and security best practices.Provide technical leadership and mentorship to junior security engineers and developers on security issues.Advise on the secure architecture and design of systems, identifying potential security gaps early in the design phase.Create and maintain documentation related to security testing, security incidents, and remediation activities.Support the incident response team in handling security incidents and provide post-incident analysis.Required Skills & Experience:2-5 years of experience in application security or related field.Strong knowledge of web and mobile application security vulnerabilities (OWASP Top 10, OWASP Mobile, etc.).Experience with penetration testing tools (Burp Suite, OWASP ZAP, etc.) and techniques.Familiarity with static and dynamic code analysis tools (Checkmarx, SonarQube, etc.).Strong understanding of secure coding practices (e.g., input validation, encryption, and authentication).Experience in threat modeling and risk assessment techniques.Understanding of web application technologies (HTML, JavaScript, CSS, etc.) and backend technologies (Java, .NET, Node.js, Python, etc.).Experience with cloud security (AWS, Azure, GCP) and containerization technologies (Docker, Kubernetes).Knowledge of industry standards and frameworks (ISO 27001, NIST, SOC2, etc.).Good understanding of authentication protocols (OAuth, SAML, OpenID, etc.) and encryption algorithms (AES, RSA, TLS, etc.).Experience in conducting security code reviews and integrating security into the SDLC.Familiarity with CI/CD pipelines and DevSecOps practices.Excellent problem-solving skills, analytical thinking, and attention to detail.Strong communication skills, with the ability to explain technical security concepts to non-technical stakeholders.Preferred Skills:Certifications such as OWASP, CISSP, CISM, CEH, or equivalent.Experience with automated security testing in CI/CD environments.Experience with SAST/DAST tools and their integration into CI/CD pipelines.Familiarity with DevOps practices and tools.

  • Senior Application Security Engineer

    1 week ago

    tamil nadu, India Bahwan CyberTek Full time

    Proficiency in Application Security, API, AI- Vulnerability Assessment/Penetration Testing, red teaming.Highly skilled and proficient in manual and automated testing using OWASP Top 10 for Web, API, AI LLM, SANS 25, Agentic AI and MITRE ATT&CK and ATLAS framework.Depth of experience with authentication and authorization frameworks such as Azure AD, Okta,...

  • Web Application Security Tester | Security Analyst

    4 days ago

    tamil nadu, India TwinTechSolutions Full time

    Company DescriptionTwinTech Solutions is a leading Digital Defense Consulting and Services firm specializing in advanced cybersecurity solutions. With over two decades of experience, our team holds prestigious accreditations such as GPEN, OSCP, CISSP, and ISO 27001, ensuring expertise across the cybersecurity domain. We adopt a client-focused approach to...

  • Senior Application Security Engineer

    5 days ago

    Chennai, Tamil Nadu, India, Tamil Nadu Bahwan CyberTek Full time

    • Proficiency in Application Security, API, AI- Vulnerability Assessment/Penetration Testing, red teaming• Highly skilled and proficient in manual and automated testing using OWASP Top 10 for Web, API, AI LLM, SANS 25, Agentic AI and MITRE ATT&CK and ATLAS framework• Depth of experience with authentication and authorization frameworks such as Azure AD,...

  • Cyber Security Engineer

    7 days ago

    tamil nadu, India ThetaZero Private Limited Full time

    Cyber Security Engineer (1–3 Years Experience)ThetaZero is a boutique technology company specializing in secure, cloud-native, AI-powered solutions for global clients.We are looking for a hands-on Cybersecurity Engineer who can strengthen our internal and external security posture, take complete ownership of our cyber hygiene, and ensure our growing...

  • Security Engineer

    3 weeks ago

    Chennai, Tamil Nadu, India Sutherland Full time

    Artificial Intelligence Automation Cloud engineering Advanced analytics For business leaders these are key factors of success For us they re our core expertise We work with iconic brands worldwide We bring them a unique value proposition through market-leading technology and business process excellence We ve created over 200 unique inventions under several...

  • Web Application Security Tester | Security Analyst

    3 days ago

    Chennai, Tamil Nadu, India, Tamil Nadu TwinTechSolutions Full time

    Company DescriptionTwinTech Solutions is a leading Digital Defense Consulting and Services firm specializing in advanced cybersecurity solutions. With over two decades of experience, our team holds prestigious accreditations such as GPEN, OSCP, CISSP, and ISO 27001, ensuring expertise across the cybersecurity domain. We adopt a client-focused approach to...

  • Google Play Security Engineer

    2 weeks ago

    Tamil Nadu, India DIGITAL MIND CONSULTANCY SERVICES PRIVATE LIMITED Full time

    Job SummaryWe are seeking a Google Play Security Engineer to ensure our Android applications comply with Google Play security policies, privacy standards, and data protection requirements. This role includes auditing apps before release, reviewing Data Safety Forms, analyzing SDKs, monitoring Play Store policy updates, and addressing app rejections or...

  • Google Play Security Engineer

    1 week ago

    tamil nadu, India DIGITAL MIND CONSULTANCY SERVICES PRIVATE LIMITED Full time

    Job SummaryWe are seeking a Google Play Security Engineer to ensure our Android applications comply with Google Play security policies, privacy standards, and data protection requirements. This role includes auditing apps before release, reviewing Data Safety Forms, analyzing SDKs, monitoring Play Store policy updates, and addressing app rejections or...

  • Google Play Security Engineer

    1 week ago

    Tamil Nadu, India DIGITAL MIND CONSULTANCY SERVICES PRIVATE LIMITED Full time

    Job Summary We are seeking a Google Play Security Engineer to ensure our Android applications comply with Google Play security policies, privacy standards, and data protection requirements . This role includes auditing apps before release, reviewing Data Safety Forms, analyzing SDKs, monitoring Play Store policy updates, and addressing app rejections or...

  • Google Play Security Engineer

    1 week ago

    tamil nadu, India DIGITAL MIND CONSULTANCY SERVICES PRIVATE LIMITED Full time

    Job Summary We are seeking a Google Play Security Engineer to ensure our Android applications comply with Google Play security policies, privacy standards, and data protection requirements . This role includes auditing apps before release, reviewing Data Safety Forms, analyzing SDKs, monitoring Play Store policy updates, and addressing app rejections or...