Application Security Analyst

TymblHub; Hyderabad; On-site; INR 400,000 - 800,000; Full time

Job summary

Cloudxtreme is seeking an experienced Application Security Analyst to lead secure design reviews, architecture assessments, and threat modeling. The role emphasizes integrating automated security testing into CI/CD pipelines and driving remediation across Java/JEE, .NET, JavaScript, Python, JSP, and ASP apps in multi-cloud environments (AWS, Azure, GCP).

The candidate should be proficient in SAST/DAST/SCA, vulnerability management, and secure code reviews, with strong communication skills to

Qualifications

• Experience in Application Security and SSDLC.
• Hands-on with SAST, DAST, SCA, pen testing, and secure code reviews.
• Knowledge of OWASP Top 10 and remediation practices.
• Secure authentication, authorization, session management, encryption, input validation.
• Experience integrating security tests into CI/CD as part of DevSecOps.

Skills

Application Security

SSDLC

SAST

DAST

Threat Modeling

CI/CD DevSecOps

OWASP Top 10

Multi-Cloud

Docker/Kubernetes

Terraform/CloudFormation

CI/CD Tools

Tools

Jenkins

Azure DevOps

Ansible

Chef

Puppet

Docker

Kubernetes

Terraform

Job description

# Application Security AnalystCloudxtremeCPosted on September 7, 2026---Experience3 - 5 yrsSalary (CTC)₹4L - ₹8LJob LocationHyderabad, IndiaVacancy1DesignationApplication Security AnalystJob TypeONSITE---## Job Description**Required Skills Application Security / SSDLC*** Strong experience in **Application Security and Secure Software Development Life Cycle (SSDLC)**, including secure design reviews, architecture assessments, and threat modeling* Hands-on expertise in **SAST, DAST, SCA, penetration testing, vulnerability scanning, and security-focused code reviews*** In-depth knowledge of **OWASP Top 10** vulnerabilities and remediation best practices* Ability to identify and remediate security flaws related to **authentication, authorization, session management, encryption, and input validation*** Experience integrating **automated security testing tools** into **CI/CD pipelines** as part of DevSecOps practices* Proficiency in reviewing and prioritizing security findings using a **risk-based approach** and working with development teams for remediation* Strong understanding of application security issues across **Java/JEE, .NET, JavaScript, Python, JSP, and ASP** applications* Hands-on experience securing applications in **multi-cloud environments (AWS, Azure, GCP)**, including **IAM, network segmentation, and encryption controls*** Knowledge of securing **containerized and cloud-native architectures**, including **Docker, Kubernetes, and serverless platforms (AWS Lambda, Azure Functions)*** Experience with **Infrastructure as Code (Terraform, CloudFormation)** security reviews and hardening* Familiarity with **CI/CD and automation tools** such as **Jenkins, Azure DevOps, Ansible, Chef, and Puppet*** Experience in securing **AI/LLM-based systems**, including **RAG pipelines, vector databases, embeddings, model-serving layers, and agentic AI architectures*** Ability to mitigate AI-related threats such as **prompt injection, jailbreaks, data poisoning, model inversion/extraction, and sensitive data leakage*** Strong communication skills to articulate application security risks and recommendations to **developers, architects, project managers, and senior leadership*** Analytical mindset with a strong desire to grow toward an **Application Security Architect / Security Architect** role