Senior Application Security Engineer

Are you an experienced and passionate Senior Application Security Engineer looking to make a significant impact? A well-known product-based organization in Bangalore is actively seeking a highly skilled individual to join their dynamic team. This pivotal role offers the opportunity to architect, implement, and maintain robust security solutions for critical applications, ensuring the highest standards of product integrity and user trust.

As a Senior Application Security Engineer, you will be instrumental in embedding security throughout the software development lifecycle. You will leverage your deep expertise in application security to protect our products from evolving threats, contributing directly to the security posture of innovative applications that serve a wide user base. This position is ideal for a proactive security professional who thrives in a challenging and collaborative environment.

Key Responsibilities

• Design, develop, and implement advanced Application Security tools and solutions to automate and enhance security processes.
• Conduct Static Application Security Testing (SAST) and Software Composition Analysis (SCA) to identify vulnerabilities early in the development cycle.
• Perform comprehensive Threat Modeling exercises to identify potential security risks and design effective mitigation strategies.
• Drive the adoption of OWASP Top 10 guidelines and promote secure coding practices across development teams.
• Collaborate with development and DevOps teams to integrate security controls and ensure compliance with security policies.
• Participate in security reviews of application architecture and design, providing expert guidance and recommendations.
• Investigate and respond to security incidents, performing root cause analysis and implementing preventative measures.
• Stay current with the latest security trends, vulnerabilities, and technologies to continuously improve our security defenses.

Requirements

• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related technical field.
• 4-6 years of hands-on experience in Application Security, with a strong focus on product-based environments.
• Proficiency in programming languages such as Go, Python, or JavaScript is essential for developing security tools.
• Extensive experience with SAST and SCA tools and methodologies.
• Proven expertise in Threat Modeling techniques and risk assessment frameworks.
• Deep understanding of OWASP Top 10, common web application vulnerabilities, and secure coding principles.
• Familiarity with cloud security principles (AWS, Azure, or GCP) and containerization technologies (Docker, Kubernetes) is a plus.
• Excellent problem-solving skills and the ability to work independently and as part of a team.
• Strong communication and interpersonal skills to effectively articulate security risks and solutions to technical and non-technical stakeholders.

What We Offer

• An exciting opportunity to work with a leading product-based organization in Bangalore.
• A challenging and rewarding role at the forefront of application security.
• Opportunities for continuous learning and professional growth in a rapidly evolving tech landscape.
• A collaborative and inclusive work environment where your contributions are valued.
• Competitive compensation package and comprehensive benefits.