Application Security Engineer

Hire Today; Bengaluru; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

DigiCert in Bengaluru, India seeks an Application Security Engineer to embed security across the SDLC. You will perform SAST/DAST, secure coding, and DevSecOps practices, collaborating with engineering teams to build secure products and services.

Responsibilities include security testing, vulnerability triage, remediation, and documenting processes while promoting a security-first culture. Proficiency in Python/Java and cloud platforms is desirable.

Qualifications

• Bachelor's degree in relevant technical field.

Responsibilities

• Integrate security controls and best practices throughout the Software Development Life Cycle.
• Perform static and dynamic application security testing
• dependency analysis
• and security assessments.
• Conduct manual and automated code reviews to identify vulnerabilities.
• Collaborate with developers to implement secure coding practices and DevSecOps workflows.
• Configure and optimize security tools including SAST
• DAST
• and SCA platforms.
• Support CI/CD security automation and secure deployment processes.
• Participate in security reviews
• vulnerability triage
• and remediation activities.
• Document security processes
• contribute to security standards
• and promote a security-first culture across engineering teams.

Skills

Application Security

DevSecOps

Secure SDLC

Python

Java

SAST

DAST

SCA

OWASP Top 10

CI/CD

GitHub Actions

Jenkins

AWS

GCP

NIST

OWASP SAMM

ISO 27001

PCI DSS

Vulnerability Assessment

Education

Bachelor's Degree in Computer Science, Cybersecurity, Information Security, Software Engineering, or a related technical field

Tools

GitHub Actions

Jenkins

Job description

DigiCert is hiring an Application Security Engineer to integrate security practices throughout the Software Development Life Cycle (SDLC). The role focuses on application security assessments, secure coding, DevSecOps, vulnerability management, and collaborating with engineering teams to build secure products and services.

Responsibilities

• Integrate security controls and best practices throughout the Software Development Life Cycle.
• Perform static and dynamic application security testing
• dependency analysis
• and security assessments.
• Conduct manual and automated code reviews to identify vulnerabilities.
• Collaborate with developers to implement secure coding practices and DevSecOps workflows.
• Configure and optimize security tools including SAST
• DAST
• and SCA platforms.
• Support CI/CD security automation and secure deployment processes.
• Participate in security reviews
• vulnerability triage
• and remediation activities.
• Document security processes
• contribute to security standards
• and promote a security-first culture across engineering teams.

Skills required

• Application Security
• DevSecOps
• Secure SDLC
• Python
• Java
• SAST
• DAST
• SCA
• OWASP Top 10
• CWE
• CI/CD
• GitHub Actions
• Jenkins
• AWS
• GCP
• NIST
• OWASP SAMM
• ISO 27001
• PCI DSS
• Vulnerability Assessment

Minimum Qualifications

• Bachelor's Degree in Computer Science, Cybersecurity, Information Security, Software Engineering, or a related technical field.

Preferred Qualifications