Application Security Engineer

Zoho; Chennai District; On-site; INR 500,000 - 700,000; Full time

Job summary

Zoho is searching for a passionate Application Security Engineer to join their team in Chennai. Ideal candidates are freshers or junior professionals excited to build a career in cybersecurity. Responsibilities include threat modeling, vulnerability management, and secure code reviews.

The role requires a strong understanding of web application security fundamentals and knowledge of network protocols. Interested candidates should apply via the Zoho Careers portal and highlight their cybersecurity projects and relevant certifications.

Qualifications

• Strong understanding of Web Application Security (OWASP Top 10).
• Knowledge of network protocols and Linux internals.
• Proficiency in at least one scripting language for automation.

Responsibilities

• Define security requirements and conduct threat modeling for new application features.
• Identify and track vulnerabilities using automated scanners.
• Perform manual code reviews to identify vulnerabilities.

Skills

Web Application Security fundamentals (OWASP Top 10)

Networking protocols (TCP/IP, HTTP/HTTPS, DNS)

Scripting languages (Python or Bash)

Tools

Snyk

Burp Suite

OWASP ZAP

Checkmarx

Job description

Zoho is looking for passionate Application Security Engineers to join their team in Chennai. This role is ideal for freshers or junior professionals (0-2 years experience) who are eager to build a career in cybersecurity and secure large-scale applications.

Role Overview & Key Details

• Company: Zoho
• Position: Application Security Engineer
• Experience: 0 - 2 Years (Freshers Welcome)
• Job Location: Chennai, Tamil Nadu
• Industry: SaaS / Enterprise Software

Key Responsibilities

• Threat Modeling: Define security requirements and conduct threat modeling for new application features.
• Vulnerability Management: Identify and track vulnerabilities using automated scanners (SAST, DAST) and manual verification.
• Secure Code Review: Perform manual code reviews to identify vulnerabilities like SQL Injection, XSS, and broken authentication.
• Security Training: Develop security test cases and tools to automate security checks within the CI/CD pipeline.
• Incident Monitoring: Assist in monitoring SIEM alerts and investigating potential security incidents.

Technical Skills & Requirements

• Strong understanding of Web Application Security fundamentals (OWASP Top 10).
• Knowledge of network protocols (TCP/IP, HTTP/HTTPS, DNS) and Linux internals.
• Proficiency in at least one scripting language like Python or Bash for automation.
• Experience with tools like Snyk, Burp Suite, OWASP ZAP, or Checkmarx is a plus.
• Basic understanding of Cloud security (AWS, Azure) and the MITRE ATT&CK framework.

Selection Process

Shortlisted candidates will be contacted for technical interviews. Zoho follows a rigorous selection process focused on core technical skills and problem-solving abilities. Candidates are advised not to apply if they are currently undergoing an interview process with Zoho.

How to Apply

Interested candidates can apply directly through the Zoho Careers portal using the link below. Ensure your application clearly highlights your cybersecurity projects and any relevant certifications.