Application Security Engineer (Cyber Security) with Development Role
Summary
Hybrid Pune role split ~70% development/remediation and 30% security testing: fixing vulnerabilities in application code, upgrading vulnerable components, building security automation (SAST/DAST/SCA in CI/CD), hardening Docker/Kubernetes, and running app/API security tests and secure code reviews. Requires 5+ years' experience.
Position Details
Role: Application Security Engineer (Cyber Security)
Employment Type: Full-Time
Location: Pune
Work Mode: Hybrid (3 Days WFO & 2 Days WFH)
Experience: 5+ Years
Shift Timings: 10:00 AM / 11:00 AM Start
Notice Period: Immediate to 15 Days Preferred
Communication Skills: Excellent
Job Summary
This is a development-first security role, where approximately 70% of the work involves software development and remediation and 30% focuses on security testing.
The ideal candidate will be responsible for fixing vulnerabilities directly in application code, upgrading vulnerable components, building security automation, and performing security assessments across web applications and APIs.
Key ResponsibilitiesDevelopment & Remediation
- Fix vulnerabilities directly in application code.
- Add test cases to validate security fixes.
- Upgrade vulnerable libraries, frameworks, and third-party components.
- Build security tooling and automation.
- Integrate SAST, DAST, and SCA tools into CI/CD pipelines.
- Harden infrastructure, cloud configurations, containers, Kubernetes, and CI/CD environments.
- Drive remediation activities through to successful deployment.
Security Testing
- Perform application and API security testing.
- Conduct secure code reviews.
- Run vulnerability assessments and prioritize findings.
- Validate remediation efforts and close security findings.
Reporting & Collaboration
- Prepare detailed security findings and remediation reports.
- Work closely with development teams and stakeholders.
- Promote secure coding practices and security awareness.
Mandatory Technical Skills
- Application Security / VAPT
- Secure Code Review
- Vulnerability Remediation
- SAST, DAST & SCA Tools
- CI/CD Security
- Docker & Kubernetes
- REST APIs & Web Security
- OAuth 2.0, OpenID Connect, JWT
- Git, Pull Requests & Code Reviews
- Python / Bash / PowerShell Scripting
Strong development expertise in at least two of the following:
- Java
- C#/.NET
- JavaScript / TypeScript
- Python
- PHP
- Go
- Swift
- Kotlin
Nice to Have
- Burp Suite Professional
- OWASP Top 10 & ASVS
- Semgrep / CodeQL
- Threat Modeling
- Secure Design Reviews
- ISO 27001 / SOC 2 / PCI DSS Compliance Exposure