Application Security Engineer

Brace Infotech; Hyderabad; Hybrid; INR 1,200,000 - 1,800,000; Full time

Job summary

Responsibilities include conducting VAPT, OWASP Top 10 testing, SAST/DAST/SCA usage, and integrating security checks into CI/CD. Collaboration with Dev and Ops teams is essential to design and deploy secure applications.

Qualifications

• Strong knowledge of OWASP Top 10 vulnerabilities.
• Hands-on experience with Vulnerability Assessment & Penetration Testing (VAPT).
• Experience in Web and Mobile Application Security Testing.
• Practical exposure to SAST, DAST, and SCA tools.
• Knowledge of DevSecOps concepts and secure CI/CD practices.
• Experience in Network and Infrastructure Security.

Responsibilities

• Perform VAPT for Web, Mobile, Network, and Infrastructure.
• Conduce Web App penetration testing based on OWASP Top 10.
• Perform Mobile App Security Testing (Android & iOS).
• Execute and manage SAST, DAST, and SCA tools and assessments.
• Provide remediation recommendations for vulnerabilities and risks.
• Integrate security testing into CI/CD pipelines as part of DevSecOps.

Skills

OWASP Top 10

VAPT

Web App Security

Mobile App Security

SAST/DAST/SCA

DevSecOps

Network Security

Security Tools

Tools

Burp Suite

OWASP ZAP

Nessus

Qualys

Metasploit

Job description

Role & responsibilities

Job Title: Security Testing / Application Security Engineer

Location: Hyderabad / Hybrid

Job Summary

We are looking for a Security Testing / Application Security Engineer with strong expertise in OWASP, VAPT, and application security. The ideal candidate will have hands‑on experience in Web, Mobile, Network, and Infrastructure Security, along with exposure to DevSecOps practices.

Roles & Responsibilities

• Perform Vulnerability Assessment and Penetration Testing (VAPT) for Web Applications, Mobile Applications, Networks, and Infrastructure.
• Conduct Web Application Penetration Testing based on OWASP Top 10 guidelines.
• Perform Mobile Application Security Testing (Android & iOS).
• Execute and manage SAST, DAST, and SCA tools and assessments.
• Identify, analyze, and validate security vulnerabilities and provide remediation recommendations.
• Integrate security testing into CI/CD pipelines as part of DevSecOps initiatives.
• Perform Network and Infrastructure Security assessments, including configuration reviews and penetration testing.
• Work closely with development and DevOps teams to ensure secure application design and deployment.
• Prepare detailed security assessment and VAPT reports with risk ratings and mitigation steps.

Required Skills & Experience

• Strong knowledge of OWASP Top 10 vulnerabilities.
• Hands‑on experience with VAPT (Vulnerability & Penetration Testing).
• Experience in Web Application and Mobile Application Security Testing.
• Practical exposure to SAST, DAST, and SCA tools.
• Knowledge of DevSecOps concepts and secure CI/CD practices.
• Experience in Network Security and Infrastructure Security.
• Familiarity with security tools such as Burp Suite, OWASP ZAP, Nessus, Qualys, Metasploit, etc.