Application Security Analyst

Careernet; Bengaluru; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Careernet in Bengaluru seeks an experienced Application Security Engineer to guide secure design across the SDLC, perform secure code reviews for Java applications, and shape threat models for enterprise systems.

You will analyze DAST findings, drive remediation, and promote DevSecOps in CI/CD workflows with cloud security in AWS/Azure and secure REST APIs.

Qualifications

• 5–10 years of experience in application security, secure software development, or DevSecOps.
• Hands-on application security experience across the SDLC with strong secure development practices.
• Strong Java and Spring Boot knowledge, including architecture assessment of backend services.
• Experience with secure code reviews and threat modeling for enterprise apps.
• Experience with DAST and interpreting security findings to drive remediation.

Responsibilities

• Provide application security guidance across design, development, testing, and deployment activities.
• Conduct secure code reviews for Java applications, Spring Boot services, and REST APIs; recommend remediation.
• Perform threat modeling and architecture reviews to identify risks and establish secure design controls.
• Analyze DAST, pentest, vulnerability findings; help teams prioritize and resolve issues.
• Promote DevSecOps by supporting automated security testing, vulnerability scanning, and security controls in delivery workflows.

Skills

Java

Threat Modeling

Application Security

SDLC

CICD

Secure Code Review

DAST

AWS

Cloud Security

Rest API

Containerization

Azure Devops

Education

Any Graduate or Postgraduate degree

Job description

Key Skills:

• Java
• Threat Modeling
• Application Security
• SDLC
• CICD
• Secure Code Review
• DAST
• AWS
• Cloud Security
• Rest API
• Containerization (Docker, Kubernetes)
• Azure Devops

Roles and Responsibilities:

• Provide application security guidance across application design, development, testing, and deployment activities.
• Conduct secure code reviews for Java applications, Spring Boot services, and REST APIs, and recommend practical remediation measures.
• Perform threat modeling and architecture reviews to identify application risks and establish secure design controls.
• Analyze DAST, penetration testing, vulnerability assessment, and software security findings; help teams prioritize and resolve issues.
• Promote DevSecOps practices by supporting automated security testing, vulnerability scanning, and security controls within delivery workflows.

Skills Required:

• 5 - 10 years of relevant experience in application security, secure software development, or DevSecOps.
• Hands-on application security experience across the software development lifecycle, with strong knowledge of secure development practices.
• Strong Java and Spring Boot understanding, including the ability to assess application architecture and backend services.
• Practical experience performing secure code reviews and threat modeling for enterprise applications.
• Experience with DAST and interpreting security findings to drive vulnerability remediation.

Good to Have:

• Experience with cloud security across AWS or Azure DevOps environments.
• Understanding of REST API security and containerization technologies such as Docker and Kubernetes.

Education:

Any Graduate or Postgraduate degree.