Application Security Engineer

ITPeopleNetwork; Kolkata District; On-site; INR 800,000 - 1,500,000; Full time

Job summary

A technology consulting company in Kolkata is seeking a motivated Application Security Engineer. This role involves supporting application security scanning in CI/CD pipelines, guiding developers, and managing vulnerabilities. Ideal candidates should have 1-4 years of experience in Application Security or DevSecOps, with hands-on knowledge of Veracode and CI/CD tools. This full-time role offers opportunities for growth in the IT Services and Consulting industry.

Qualifications

• 1–4 years of experience in Application Security or DevSecOps.
• Basic hands‑on experience with Veracode (SAST/DAST).
• Familiarity with CI/CD tools (Azure DevOps, Jenkins, GitHub).
• Good communication and documentation skills.

Responsibilities

• Identify applications and pipelines for security scanning.
• Run initial scans and establish a security baseline.
• Support Veracode integration with CI/CD tools.
• Track open vulnerabilities and support SLA adherence.

Skills

Application Security

DevSecOps

Veracode

CI/CD tools

Secure coding concepts

Communication skills

Tools

Veracode

Azure DevOps

Jenkins

GitHub

Job description

We are looking for a motivated Application Security Engineer with hands-on experience in Veracode and basic knowledge of secure development practices. The role involves supporting the setup, integration, and daily operations of application security scanning within CI/CD pipelines. You will work closely with development and security teams to ensure vulnerabilities are identified, tracked, and remediated.

Key Responsibilities

• Identify applications, repositories, and pipelines that require security scanning.
• Assist with creating Veracode accounts and configuring user access.
• Run initial scans and help establish a security baseline.
• Support Veracode integration with CI/CD tools (Jenkins, Azure DevOps, GitHub).
• Help configure scanning policies, thresholds, and automated workflows.
• Guide developers on reading Veracode reports and addressing findings.
• Work with security champions to manage basic policy updates and triage issues.
• Maintain documentation for scan setup, scheduling, and reporting.
• Track open vulnerabilities and support SLA adherence.
• Assist in feeding findings into tools like ServiceNow.
• Monitor ongoing scans and ensure they run across all required pipelines.
• Support the operations team with basic admin tasks and troubleshooting.

Qualifications

• 1–4 years of experience in Application Security or DevSecOps.
• Basic hands‑on experience with Veracode (SAST/DAST).
• Familiarity with CI/CD tools (Azure DevOps, Jenkins, GitHub).
• Understanding of secure coding concepts and vulnerability remediation.
• Good communication and documentation skills.

Seniority level

• Mid‑Senior level

Employment type

• Full‑time

Job function

• Consulting

Industries

• IT Services and IT Consulting
• Software Development
• IT System Custom Software Development

Get notified about new Application Security Engineer jobs in Kolkata, West Bengal, India.