Application Security Engineer

Rwindia; Mumbai; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Rwindia in Mumbai seeks an experienced Application Security professional to manage security across digital applications, including governance, vulnerability remediation, and compliance.

You will lead vulnerability tracking, coordinate with teams, and drive awareness and incident response. The role requires 6–8 years in app security and hands-on experience with Azure security services and SIEM.

Qualifications

• 6–8 years of experience in application security.
• Strong knowledge of OWASP Top 10.
• Experience with vulnerability assessment and remediation tracking.
• Familiarity with governance, compliance, and PSAT.
• Experience with Azure security services (Defender for Cloud, Key Vault, NSG, WAF).
• Understanding of IAM, privileged access reviews, and segregation of duties.
• Experience with incident response and SIEM integration.

Responsibilities

• Track vulnerabilities and coordinate remediation.
• Monitor PSAT compliance and security controls.
• Review security for app changes and access-related activities.
• Coordinate security incidents and corrective actions.
• Maintain security risk registers, KPI reports, and audit documentation.
• Support security monitoring, SIEM integration, and vulnerability scanning.
• Coordinate with application and enterprise cybersecurity teams.
• Conduct security awareness activities.

Skills

Application security

OWASP Top 10

Vulnerability assessment

PSAT

Azure security services

Identity & access management

SIEM

Security governance

Tools

Defender for Cloud

Key Vault

NSG

WAF

Security monitoring tools

Job description

Job Summary

Manage application security, vulnerability remediation, security governance, and compliance across digital applications, ensuring security risks are identified and addressed.

Key Responsibilities

• Track vulnerabilities, prioritize risks, and coordinate remediation.
• Monitor PSAT compliance and security controls.
• Conduct security reviews for application changes and access-related activities.
• Coordinate security incidents, investigations, and corrective actions.
• Maintain security risk registers, KPI reports, and audit documentation.
• Support security monitoring, SIEM integration, and vulnerability scanning.
• Coordinate with application teams, support teams, and enterprise cybersecurity.
• Conduct security awareness activities.

Required Skills & Experience

• 6–8 years of experience in application security.
• Knowledge of application security fundamentals and OWASP Top 10.
• Experience in vulnerability assessment, prioritization, and remediation tracking.
• Understanding of security governance, compliance, and PSAT.
• Knowledge of Microsoft Azure security services: Defender for Cloud, Key Vault, NSG, and WAF.
• Understanding of identity and access management, privileged-access reviews, and segregation of duties.
• Experience with security incident response, monitoring tools, and SIEM integration.

Preferred Qualifications

• Knowledge of Secure SDLC, threat modelling, secure code reviews, and DevSecOps.
• Exposure to cloud and application security architecture.
• Knowledge of ISO 27001, NIST, or similar frameworks.
• Certifications such as CISSP, CSSLP, CEH, Security+, SSCP, or Azure Security Engineer Associate.

Other Requirements

• Strong stakeholder communication, coordination, reporting, and security-awareness skills.