Information Security Engineer

Application Security Engineer-II

Experience: 5 - 8 Years Exp

Salary: 30 LPA to 40 LPA

Preferred Notice Period: Upto 60 Days

Opportunity Type: Hybrid (Pune)

Placement Type: Full-time

Note: This is a requirement for one of Uplers' Clients Urbint

Must have skills: Application Security AND Threat Modeling OR Security Automation OR Vulnerability Assessment AND Secure SDLC

About Urbint:

Urbint uses AI and the latest industry science to identify threats to workers and infrastructure to stop safety incidents before they happen. Urbint surfaces risk at the point of work, enabling energy and infrastructure companies to prevent worker injuries and asset damages. Many of the largest energy and infrastructure companies in North America trust Urbint to protect workers, assets, communities, and the environment. Important Alert It has come to our attention that individuals may have received false job offers from an email ending in Please be advised that this address is not affiliated with Urbint. At Urbint, safety is at the core of our missionnot only in the services we provide but also in how we communicate. If you recently applied to Urbint and received correspondence from this email, do not respond. Instead, please report the sender to your email provider. Our official communications will come directly from our email addresses. Stay vigilant, and thank you for your attention to this matter.

Job description

Job Summary:

We are seeking an Application Security Engineer-II to help embed security within Urbints software development lifecycle and scale our product security practices. This role focuses on enabling developers with the right tools, patterns, and guidance, while collaborating with engineering, CloudOps, and InfoSec to proactively identify, assess, and mitigate risk across Urbints platforms. Youll also support Urbints security posture in customer engagements and help evaluate and improve the maturity of security controls across our products.

What You'll D :

• Design and implement security tooling and automation in CI/CD pipelines (SAST, secrets scanning, dependency checks, IaC scanning) to integrate security at build-time.
• Conduct security assessments of Urbints web apps, APIs, cloud-native services, and internal tooling using manual and automated approaches.
• Lead and facilitate threat modeling for critical features and systems, and drive mitigation strategies with engineering teams.
• Collaborate on application security design, providing guidance on authentication, authorization, encryption, input validation, error handling, and data protection.
• Evaluate the security maturity of Urbint products, identify gaps, and partner with engineering to close them.
• Partner with InfoSec to support customer security questionnaires, audits, and external security posture communications.
• Promote secure coding practices and define reusable secure patterns, golden paths, and developer guides.
• Support and enable Security Champions across squads through mentorship, training, and playbooks.
• Work with CloudOps on runtime guardrails, including secrets management, identity controls, and logging practices.
• Assist in security incident investigations related to application-layer vulnerabilities and support remediation planning.
• Deliver security awareness sessions and workshops to uplift team security knowledge.
• Stay up to date on security trends, tools, and best practices, and share knowledge with engineering teams.

Who You Are:

• 6+ years experience in application security or DevSecOps roles.
• Solid understanding of web application security (e.g., OWASP Top 10, ASVS) and common vulnerabilities
• Hands-on experience with security tooling in CI/CD pipelines (e.g., SAST, SCA, secrets scanning, IaC scanning).
• Experience in secure architecture, threat modeling, and design reviews.
• Proficiency with a modern programming language (Python, TypeScript, JavaScript, or similar).
• Strong communication skills, able to collaborate effectively across engineering, CloudOps, and InfoSec teams.
• Bonus : Experience supporting data security initiatives or customer security assessments.
• Bonus : Familiarity with cloud-native environments (AWS, GCP, Azure)

How to apply for this opportunity?

Easy 3 Step Process:

• Click On Apply and register or log in to our portal
• Upload updated Resume & complete the Screening Form
• Increase your chances of getting shortlisted & meet the client for the Interview

About Uplers:

Our goal is to make hiring and getting hired reliable, simple, and fast. Our role will be to help all our talents find and apply for relevant product and engineering job opportunities and progress in their career.

(Note: There are many more opportunities apart from this on the portal.)

So, if you are ready for a new challenge, a great work environment, and an opportunity to take your career to the next level, don't hesitate to apply today. We are waiting for you