Application Security

15 hours ago

Bengaluru, Karnataka, India ISECURION Full time ₹ 12,00,000 - ₹ 15,00,000 per year

Job Title: - Application Security

Notice Period: - Immediate Joiners

Location: - Bengaluru (Onsite)

Company Description:

ISECURION is a leading cybersecurity services provider, ISO 27001:2022 certified and CERT-IN empanelled. We offer innovative solutions and cutting- edge research to address the evolving threats in the cyber landscape. We work with a diverse clientele, both global and Indian, to safeguard their digital assets, deliver strategic security consulting, and enhance their cyber resilience. Are You Passionate About Cybersecurity?

Desired Qualification + Experience: -

· We are looking for an experienced Application Security role with 4+ year experience with strong hands-on expertise in Web, API, Mobile (Android & iOS), Thick Client Security, SAST/DAST, and Secure Code Review. The role requires deep technical skills, strong analytical thinking, and effective collaboration with engineering teams.

· A degree in Computer Science, Information Security, Cybersecurity, or a related field is preferred, but not always required if the candidate has sufficient hands-on experience.

· Hands-on experience in conducting security assessments and penetration tests on Web Applications, APIs, and Mobile Applications.

Role Technical Requirements/Job Specifications:

· Perform manual and automated penetration testing for Web, API, Mobile (Android/iOS), and Thick Client applications.

· Conduct SAST (secure code review) and DAST (runtime application testing) using industry-standard tools.

· Evaluate applications against OWASP Top 10, CWE/SANS Top 25, OWASP Mobile Top 10, MSTG and platform-specific security guidelines.

· Perform API testing including auth bypass, access control issues, injection flaws, and business logic vulnerabilities.

· Conduct mobile security testing, including reverse engineering, dynamic analysis, SSL pinning bypass, and root/jailbreak detection bypass.

· Assess vulnerabilities and assign accurate CVSS v3.x severity scores based on impact, exploitability, and risk.

· Prepare detailed reports containing risk ratings, CVSS scoring, PoCs, and remediation recommendations.

· Collaborate with development teams to guide them on secure coding and remediation practices.

· Present security findings clearly to technical and non-technical stakeholders.

Tools Knowledge: -

· Web Application Tools: Burp Suite Pro, OWASP ZAP, Acunetix, Nessus, Nikto.

· Mobile Application Tools: MobSF, ApkTool, JADX, Frida, Drozer, QARK, Xcode, Android Studio, Otool.

· General Penetration Testing Tools: Metasploit, Nmap, Wireshark, Kali Linux.

· Thick Client Security: Burp Suite / ZAP, MITMProxy, Wireshark, Sysinternal tool, OllyDbg and Ghidra.

· Source Code Review: Semgrep, SonarQube and IDE review plugins etc.

Certifications (Preferred): -

· Certified Ethical Hacker (CEH)

· CAPen/CAPenX

· eJPT

· Any other relevant or equivalent certifications are also considered valuable.

Collaboration and Communication: -

· Work closely with client IT teams to align security practices with business needs.

· Provide advisory support on emerging threats and recommend mitigation strategies.

· Stay updated on the latest security trends, tools, and technologies to enhance service delivery.

  • Application Security

    14 hours ago

    Bengaluru, Karnataka, India Infosys Full time ₹ 6,00,000 - ₹ 12,00,000 per year

    Key Responsibilities:Application SecurityNessusSAST DAST PTBurpsuitQulaysInfra VMInfra PTDevescopsContainer SecurityPreferred Skills:Application Security,Application Security->Application Risk Profiling,Application Security->Burpsuite,Application Security->Devsecops,Application Security->Ethical Hacking(CEH),Application Security->Nessus,Application...

  • Application Security

    15 hours ago

    Bengaluru, Karnataka, India Pearson Full time ₹ 20,00,000 - ₹ 40,00,000 per year

    DescriptionAt Pearson, we are the world's learning company with over 24,000 employees across 70 countries. Our mission is to combine world-class educational content and assessment, powered by services and technology, to enable more effective teaching and personalised learning at scale. We believe that wherever learning flourishes, so do people.In this...

  • Application Security

    1 week ago

    Bengaluru, Karnataka, India Dezerv Full time ₹ 10,00,000 - ₹ 25,00,000 per year

    About Dezerv :Dezerv is a house of investing solutions for high-net-worth and affluent Indians. Dezerv is co-founded by Sandeep Jethwani, Vaibhav Porwal, and Sahil Contractor. They have led successful wealth management businesses and managed over USD 7 billion in assets. The Dezerv team brings together decades of investing expertise from leading global...

  • Manager - Application Security

    2 weeks ago

    Bengaluru, Karnataka, India Liminal Custody Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    About the Role:We are seeking an experienced and technically strong Application Security Manager to lead and mature our application security program. The ideal candidate will have 5 - 8 years of relevant experience, a deep understanding of secure software development, and the ability to work independently while collaborating with cross-functional teams. You...

  • Application Security Engineer

    2 days ago

    Bengaluru, Karnataka, India Allen Online Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    Job Title: Staff Engineer - Application SecurityWe are seeking a highly experienced Principal Engineer in Application Security to join our team. The ideal candidate will play a critical role in ensuring our applications are secure and comply with the Indian Data Protection and Privacy (DPDP) laws. This position requires a deep understanding of application...

  • Application Security Engineer

    4 days ago

    Bengaluru, Karnataka, India Clinisys Full time ₹ 15,00,000 - ₹ 25,00,000 per year

    In this role, as an Application Security Engineer, you will work as a part of our security engineering team and you will collaborate with other IT professionals to ensure that data is protected. You will be responsible for suggesting and implementing with best security practices within software development lifecycle (SDLC). You will responsible for setting...

  • Application Security Engineer

    1 week ago

    Bengaluru, Karnataka, India ALLEN Digital Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    About ALLEN Digital:At ALLEN Digital, we spearhead a technology-driven approach to education, leveraging top-tier tech talent from leading technology firms. Through our strategic collaboration with Bodhi Tree Systems, a prominent venture capital firm known for building & scaling tech-first brands, we are revolutionizing education with a tech-first...

  • Application Security Engineer

    4 days ago

    Bengaluru, Karnataka, India Dezerv Full time ₹ 15,00,000 - ₹ 30,00,000 per year

    Dezerv is a house of investing solutions for high-net-worth and affluent Indians. Dezerv is co-founded by Sandeep Jethwani, Vaibhav Porwal, and Sahil Contractor. They have led successful wealth management businesses and managed over USD 7 billion in assets. The Dezerv team brings together decades of investing expertise from leading global financial...

  • Application Security Engineer

    2 weeks ago

    Bengaluru, Karnataka, India Step One Step Ahead Llp Full time ₹ 2,16,000 - ₹ 7,20,000 per year

    Were hiring a Application Security Test Engineer with 2-3 years of experience in Application Security, SAST, and SCA tools like Snyk, SonarQube, or Checkmarx. Integrate security into CI/CD, manage vulnerabilities, and support teams in secure coding.

  • Intern - Application Security

    6 days ago

    Bengaluru, Karnataka, India Optiv Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    An Optiv Application Security intern should be passionate about technology and have a desire to learn and enhance their skillsets within the cybersecurity domain. The intern will be provided with training and mentorship to actively participate in the ongoing Application Security practice initiatives. Additionally, they will undergo formal training sessions...