Senior Application Security Engineer

About Narayana Health:

Narayana Health is headquartered in Bengaluru, India, and operates a network of hospitals in India and Overseas. Our mission is to deliver high-quality, affordable healthcare services to the broader population. Narayana Health Group is Indias leading healthcare provider and one of the largest hospital groups in the country with a network of 21 hospitals, 5 heart centers, and 19 primary care facilities. The NH group treats over 2.6 Million patients every year from over 78 countries covering 30+ medical specialties.

Our Centers of Excellence help in treating Adult & Pediatric patients and we have one of the largest transplant centers in India. We have a strong presence across 17 locations in India, and an overseas hospital in the Cayman Islands, USA. Two of our hospitals have international accreditation from the Joint Commission International (JCI) and 19 hospitals have domestic accreditation from the National Accreditation Board for Hospitals (NABH).

For more details, please refer to our website at:

About Athma:

Software Development Centre is the technology arm of Narayana Health, a leading healthcare network spanning two countries. We at Athma SDC, are engaged in building next generation products for healthcare with the goal of making healthcare safe and affordable to the patients. Our products are handling more than 10M transactions daily and help 7M patients navigate their health journeys.For more details, please refer to our website at -

Why Join ATHMA?

• Be Part of a Health Tech Revolution: Join ATHMA in transforming healthcare through technology, making it more personalized, accessible, and effective for Indian users.
• Work-Life Balance: We support a balanced work environment that fosters personal well-being and professional growth.
• Growth & Learning: Youll have opportunities to learn from the best in health tech and work on products that directly impact millions of users.
• Impactful Work: Play a key role in improving patient outcomes, driving innovation, and setting new standards for healthcare technology in India.

Role: Senior Application Security Engineer

• As a vital member of our team, the Application Security Engineer will play a key role in fortifying our organization's application security. You will be responsible for implementing and enhancing security measures, ensuring compliance, and collaborating with cross-functional teams to safeguard our products.

Key Responsibilities:

• Develop and integrate security measures throughout the software development life cycle.
• Conduct security testing for mobile/web applications.
• Work with Cyber Security solutions, including Web/Mobile Application Security and API Management.
• Oversee and ensure compliance with regulatory standards and security best practices.
• Provide guidance in code reviews, emphasizing secure coding practices.
• Collaborate with cross-functional teams for security risk assessments, incident response, and remediation efforts.
• Communicate security concepts effectively to both internal and external stakeholders.
• Understand and apply knowledge of enterprise architecture, operations, and security controls.
• Good to have Relevant certifications in application security and cyber security.

Experience - 5 to 8 Years

Required Skills:

Java-based Technologies & Spring Security:

• Hands-on experience in securing applications developed using Java, with a strong focus on frameworks like Spring, Spring Boot, and Spring Security.
• In-depth knowledge of authentication, authorization, and other security functionalities provided by Spring Security.
• Ability to identify and mitigate Java-specific security vulnerabilities.

Secure SDLC and Threat Modelling:

• Proven experience in implementing security throughout the software development life cycle.
• Ability to apply threat modeling methodologies for designing secure applications.

Security Testing:

• Proficiency in conducting security testing for mobile applications and APIs.
• Experience with SCA, SAST, DAST, and other relevant security testing tools.

Cyber Security Solutions:

• Familiarity with Cyber Security solutions, including Web/Mobile Application Security and API Management.
• Knowledge of Assessment frameworks and compliance obligations.

Compliance and Standards:

• Experience in overseeing and ensuring compliance with security standards.
• Implementation and maintenance of security controls to meet compliance requirements.

Code Reviews and Communication:

• Ability to provide guidance in code reviews, emphasizing security best practices.
• Strong communication skills to articulate complex security concepts to diverse stakeholders.

Cross-functional Collaboration:

• Proven collaboration skills with cross-functional teams for security risk assessments and incident response.