Application Security Engineer

Insight Global; Pune District; On-site; INR 1,200,000 - 2,200,000; Full time

Job summary

Insight Global is seeking an Application Security Engineer in Pune, India to protect customer-facing applications, cloud environments, and IoT solutions. You will partner with development teams to embed security across the software lifecycle and ensure alignment with security best practices.

The role involves governance, risk, and compliance activities, including customer security questionnaires, contract reviews, audits, and security inquiries.

Qualifications

• Hands-on experience with application security, vulnerability assessments, penetration testing, and vulnerability management.
• Understanding of secure application development practices and OWASP Top 10.
• Experience with SDLC security integration.
• Familiarity with Azure and/or AWS cloud security.
• Experience with SOC 2 or ISO 27001 audits.

Responsibilities

• Support security of customer-facing applications, cloud environments, and IoT solutions.
• Collaborate with development teams to embed security throughout the SDLC.

Skills

App security basics

Vulnerability management

Penetration testing

SDLC security

IAM & access control

Education

Bachelor's degree in Cybersecurity

Bachelor's degree in Computer Science

Tools

Checkmarx

Veracode

Snyk

Burp Suite

SonarQube

Job description

Job Description

We are seeking an Application Security Engineer to support the security of customer-facing applications, cloud environments, and connected IoT solutions. This role will partner closely with application development teams to identify and remediate vulnerabilities, embed security throughout the software development lifecycle, and ensure applications are designed and deployed according to established security best practices.

The position will also provide support across governance, risk, and compliance activities, including customer security questionnaires, contract reviews, audits, and security inquiries. The ideal candidate will bring a strong foundation in application security with exposure to cloud security, security frameworks, and vulnerability management. Familiarity with IoT security and connected devices is a plus.

Skills and Requirements

• Less than 8 years of professional experience in application security, security engineering, vulnerability management, penetration testing, or a related cybersecurity role.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience.
• Hands-on experience with application security, vulnerability assessments, penetration testing, and vulnerability management.
• Understanding of secure application development practices and common application vulnerabilities, including the OWASP Top 10.
• Experience working with development teams to incorporate security throughout the SDLC.
• Familiarity with cloud security concepts and architectures within Microsoft Azure and/or AWS.
• Working knowledge of security and compliance frameworks such as NIST, ISO 27001, and SOC 2.
• Strong analytical and problem-solving skills with the ability to identify, communicate, and help remediate security risks.
• Strong written and verbal communication skills, including the ability to communicate security requirements to technical teams, business stakeholders, and customers.
• Ability to manage multiple priorities and work effectively in a fast-paced environment.
• Experience with application security testing tools such as Checkmarx, Veracode, Snyk, Burp Suite, SonarQube, or similar SAST/DAST/SCA technologies.
• Foundational knowledge of IoT security, connected devices, firmware, industrial systems, or operational technology environments.
• Experience with Python, PowerShell, or another scripting language.
• Experience supporting SOC 2 or ISO 27001 audits, evidence collection, or customer security assessments.
• Experience completing customer security questionnaires or participating in customer-facing security discussions.
• Understanding of identity and access management, RBAC, authentication, and secure access controls.
• Familiarity with security monitoring and risk analysis across cloud or IoT environments.
• Security certifications such as Security+, GSEC, or similar credentials.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].