Senior Application Security Engineer

2 weeks ago

Gurgaon, Haryana, India Cvent Full time ₹ 15,00,000 - ₹ 28,00,000 per year

Overview
You are an experienced, hands-on Application Security Engineer who's passionate about building secure products, automating security workflows, and influencing development teams to embed security into the product development lifecycle. Whether you're ready to take ownership or growing your deep technical skills as a
Senior Engineer
, you're ready to make a measurable impact. You are required to be in the office for 2 days/week.

You excel at the core of Application Security—from secure design reviews, threat modeling to vulnerability discovery via penetration tests and remediation—and bring an engineering mindset that enhances your impact. You're also passionate about building internal tools, scripting automation, and scaling security practices across diverse tech stacks as part of Cvent's Application Security Research & Engineering (ASRE) program

In This Role, You Will

  • Integrate and scale security across the SDLC, embedding tools like SAST, DAST, and SCA within CI/CD pipelines.
  • Perform threat modeling, secure code and design reviews, penetration testing and risk assessments for new and existing features—including cloud-native and AI/ML systems.
  • Develop internal tools to automate security testing, support securing cloud-native applications using AWS CDK (CDF), and governance processes using scripting languages like Python, JavaScript, TypeScript, or similar.
  • Collaborate with engineering teams to remediate vulnerabilities identified via scans, manual testing, or external assessments.
  • Partner with product and engineering teams to improve the security posture of APIs, web apps, mobile apps, and infrastructure.
  • Communicate risks clearly to technical and non-technical audiences and support compliance efforts with ISO 27001, SOC2, and PCI.

Why You'll Love This Role

  • You'll build and automate security programs that scale across hundreds of apps and services.
  • You'll join the ASRE team to innovate at the forefront of Application Security.
  • You'll work with teams who take security seriously and give you the support to make meaningful change.
  • You'll grow in a role that offers both technical depth and leadership opportunities, depending on your experience and ambition.

Here's What You Need

  • 6+ years of hands-on experience in application security or secure software development.
  • Strong scripting/programming skills—able to automate tasks and build internal tools using Python, JavaScript, Bash, or similar.
  • Experience with CI/CD toolchains and integration of security tools in SDLC.
  • Strong familiarity with cloud platforms (AWS-preferred, GCP, or Azure) and principles of cloud-native security.
  • Proficiency in security testing tools (e.g., BurpSuite, Checkmarx, Mend, Veracode, Fortify, ZAP, etc.).
  • Strong grasp of OWASP Top 10, CWE, SANS Top 25, secure coding practices, and web application vulnerabilities.

Bonus If You Have

  • Experience securing AI/ML pipelines and understanding of adversarial ML or model privacy concerns.
  • Exposure to DevSecOps, SBOMs, IaC security, or supply chain risk management
  • Security certifications such as AWS Certified Security - Specialty, AWS Certified Solutions Architect - Associate/Professional, CSSLP, OSWE, GWAPT, CISSP, OSCP

  • Principal Application Security Engineer

    1 week ago

    Gurgaon, Haryana, India Cvent Full time

    Job DescriptionPrincipal Application Security Engineer / ArchitectLocation: Gurgaon, India (Hybrid 2 days/week in office)Department: Information Security / Application SecurityReports To: Manager, Application SecurityExperience: 12+ years in cybersecurity, with a significant focus on application security and security architectureEmployment Type: Full-time |...

  • Principal Engineer, Application Security

    1 week ago

    Gurgaon, Haryana, India Cvent Full time

    Job DescriptionYou are a highly experienced and visionary security professional with deep expertise in application security, architecture, and secure software development- You're not only a strategist and a technical authority, but also someone who remains hands-on when it matters- You thrive on solving large-scale security problems, designing resilient...

  • Application Security Consultant

    2 weeks ago

    Gurgaon, Haryana, India Cynosure Corporate Solutions Full time ₹ 15,00,000 - ₹ 20,00,000 per year

    Roles and Responsibilities:Act as a key liaison between various stakeholders, including development teams and leadership.Provide hands-on, senior-level consulting to development teams on the usage of new tools (e.g., Snyk) and guide the establishment of new processes.Demonstrate expertise in governance, risk management, and ensure compliance with security...

  • Senior Product Security Engineering Lead

    1 week ago

    Gurgaon, Haryana, India beBeeSecurity Full time ₹ 10,00,000 - ₹ 13,00,000

    Job Title: Product Security Engineering LeadThis position offers the opportunity to excel in a critical area of business where security and technology converge.The Senior Lead Product Security Engineer will develop and implement engineering processes for early detection of design flaws, vulnerabilities, weaknesses, missing security controls, and secure...

  • Senior Security Engineer

    2 weeks ago

    Gurgaon, Haryana, India AIS business solution Full time ₹ 15,00,000 - ₹ 20,00,000 per year

    Job Tittle - Security Test EngineerJob Type: Full-time EXP 5+ Years Location - GurgaonRoles & Responsibilities:Perform Security Assessments: Conduct various types of security testing, including: 1. Penetration Testing: Perform black-box, gray-box, and white-box penetration testing on web applications, APIs, mobile applications (iOS/Android), and network...

  • Deputy Manager – IT/IS

    2 weeks ago

    Gurgaon, Haryana, India Senior Full time ₹ 15,00,000 - ₹ 20,00,000 per year

    Company DescriptionSenior is a UK based MNC and has operations in 12 countries and has 26 operating businesses worldwide serving number of markets. Senior's experienced manpower support, effective use of raw material as well as high technology enable it to deliver optimized components within a short development time and at most competitive prices.Senior...

  • Application Security Engineer

    2 weeks ago

    Gurgaon, Haryana, India Publicis Re Full time ₹ 9,00,000 - ₹ 12,00,000 per year

    Job Description :Bachelor's degree within a science or related discipline. 4 + years of relevant experience in vulnerability and penetration testing. Good understanding of OWASP Top 10 , SANS Top 25, OSSTMM, PTES, NIST standards Expertise and practical hands-on top industry Application Security testing tools like HCL AppScan, Checkmarx, Veracode, Burp...

  • Senior Security Operations Engineer

    4 days ago

    Gurgaon, Haryana, India noon Full time ₹ 7,00,000 - ₹ 12,00,000 per year

    About noonnoon, the region's leading consumer commerce platform. On December 12th, 2017, noon launched its consumer platform in Saudi Arabia and the UAE, expanding to Egypt in February 2019. The noon ecosystem of services now includes marketplaces for food delivery, quick-commerce, fintech, and fashion. noon is a work in progress; we're six years in, but...

  • Application Security

    2 weeks ago

    Gurgaon, Haryana, India eSec Forte® Technologies Full time ₹ 15,00,000 - ₹ 20,00,000 per year

    · Serve as a trusted advisor to our enterprise customers, leading the analysis and remediation efforts of complex vulnerabilities using the full Checkmarx platform.· Lead security reviews and consultation efforts across various SDLC stages, focusing on holistic application security.· Guide customers in adopting secure coding practices, threat modeling,...

  • Security Engineer

    2 weeks ago

    Gurgaon, Haryana, India Steerlean Full time ₹ 1,04,000 - ₹ 1,30,878 per year

    Cloud Security Architecture : Asses, help in design and development of AWS, Azure and AWS security architectures for protecting PII/PCI data deployed into different types of cloud and cloud/hybrid systems. Improve the security around cloud-based applications, across all types (including Infrastructure, Platform, and Software as a Service (IaaS/PaaS/SaaS). ...