Application Security Engineer

Talent'd HR Solutions; Chennai District; On-site; INR 600,000 - 800,000; Full time

Job summary

A leading software company in Chennai is seeking an Application Security Engineer with 0–2 years of experience in Security Operations or Application Security. This role involves conducting risk assessments, threat modeling, and deploying security tools to safeguard applications and services. The ideal candidate will possess strong knowledge of network protocols and programming skills. This position offers an opportunity to grow in a dynamic environment, contributing to the security of critical systems while working alongside a dedicated team.

Qualifications

• 0–2 years of experience in Security Operations or Application Security.
• Strong understanding of security principles and methodologies.
• Proficiency in programming for building security tools and automation.

Responsibilities

• Conduct comprehensive risk assessments and prioritize technical risks.
• Perform threat modeling for applications and infrastructure.
• Implement and fine-tune SAST, DAST, and IAST tools.
• Conduct manual code reviews to find critical business logic vulnerabilities.
• Collaborate with development teams to remediate vulnerabilities.

Skills

Network protocols

Linux internals

MITRE ATT&CK framework

Threat modeling methodologies

SAST tools

DAST tools

IAST tools

Programming in Python

AWS security services

Incident response

Education

Bachelor's degree in Computer Science

Information Security

Tools

Snyk

Veracode

Checkmarx

Burp Suite

OWASP ZAP

Contrast Security

Job description

Zoho is seeking talented and passionate Application Security Engineers to join our security team in Chennai. This role is ideal for candidates with 0–2 years of experience in Security Operations or Application Security who are eager to grow their expertise in safeguarding applications, services, and infrastructure.

Key Responsibilities

• Conduct comprehensive risk assessments to identify, document, and prioritize technical risks, translating vulnerabilities into actionable business insights.
• Perform threat modeling for applications, services, and infrastructure, identifying attack vectors and security gaps using frameworks such as STRIDE.
• Lead threat modeling sessions with engineering teams for new features and projects.
• Oversee the full lifecycle of vulnerabilities in software and infrastructure, from detection to remediation.
• Implement and fine-tune SAST, DAST, and IAST tools to maintain high-quality security signals without impeding development workflows.
• Conduct manual code reviews to detect critical business logic vulnerabilities that automated tools may miss.
• Monitor, triage, and investigate security alerts from intrusion detection systems, SIEMs, and other monitoring tools.
• Develop automation scripts in Python, Bash, or similar languages to streamline alert handling and incident response processes.
• Analyze suspicious activity, validate incidents, and support incident response and post-incident analysis.
• Collaborate with development teams to remediate vulnerabilities and integrate security checks into CI/CD pipelines.
• Maintain clear documentation of findings, remediation actions, and security recommendations.

Required Skills

• Strong knowledge of network protocols, Linux internals, and the MITRE ATT&CK framework.
• Experience with threat modeling methodologies such as STRIDE or attack trees.
• Hands-on experience with SAST, DAST, and IAST tools.
• Proficiency in AppSec tools like Snyk, Veracode, Checkmarx, Burp Suite, OWASP ZAP, or Contrast Security.
• Programming skills in at least one major language for building security tools and automation.
• Familiarity with AWS, Azure, or GCP security services.
• Experience with Infrastructure as Code, log analysis, alert tuning, and incident response is a plus.

Location

Experience

0–2 years

Key Skills

Education Requirements

• Bachelor's degree in Computer Science
• Information Security
• or related field preferred

Zoho Corporation is a globally recognized provider of cloud-based software solutions, specializing in a comprehensive suite of business, productivity, and collaboration applications. Founded in 1996 and headquartered in Chennai, India, Zoho's mission is to empower organizations of all sizes to run their entire business operations online with affordable, integrated tools. The company is renowned for its privacy‑centric approach and commitment to building software in‑house, with over 55 applications covering CRM, finance, HR, project management, and more.

With more than 15,000 employees and over 100 million users worldwide as of 2024, Zoho has established itself as a major player in the SaaS industry, competing with global giants while maintaining independence and a bootstrapped growth model. Zoho has recently expanded its global data center footprint and launched new AI‑powered features across its product suite, reinforcing its reputation for innovation and customer‑centricity. The company is also noted for its rural development initiatives, opening offices and data centers in non‑urban locations to foster local talent and economic growth.

Company Details

Technology Software Cloud Computing SaaS Business Applications