Application Security Engineer

Byline Learning Solutions; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Byline Learning Solutions is seeking an Application Security Engineer to build, test, and harden secure systems across our products and infrastructure. The role requires thinking like an attacker while defending the platform, located in Pune with work-from-office expectations.

Candidates should have 3-5 years of experience in application security or ethical hacking, with strong knowledge of OWASP Top 10 and secure SDLC practices. Certifications such as CEH or OSCP are preferred.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field
• 3-5 years of experience in Application Security / Ethical Hacking / Penetration Testing
• Relevant certifications preferred: CEH, OSCP, CompTIA Security+, or equivalent
• Solid understanding of OWASP Top 10, secure coding principles, and common application vulnerabilities
• Prior experience working closely with development teams in a Secure SDLC environment

Responsibilities

• Perform penetration testing and vulnerability assessments on web applications, APIs, and mobile platforms
• Conduct secure code reviews and work with developers to fix vulnerabilities early in the SDLC
• Define and enforce application security standards, hardening guidelines, and secure configuration baselines
• Carry out threat modeling for new features and major architectural changes
• Manage vulnerability disclosure, patching cycles, and risk remediation timelines
• Monitor for emerging threats, CVEs, and attack techniques relevant to our tech stack
• Collaborate with DevOps/Cloud teams to secure CI/CD pipelines and cloud infrastructure
• Support incident response efforts when security issues are identified
• Document findings, risk ratings, and remediation guidance clearly for both technical and non-technical stakeholders

Skills

Ethical Hacking

Penetration Testing

OWASP Top 10

API Security

Secure SDLC

Cloud Security

Burp Suite

OWASP ZAP

Nmap

Metasploit

Secure Coding

Education

Bachelor's degree in CS/IT/Cyber Security

Tools

Docker/Kubernetes

Job description

We are looking for an Application Security Engineer to help us build, test, and harden secure systems across our products and infrastructure. If you think like an attacker but build like a defender, this role is for you.

Role: Application Security Engineer
Experience Required: 35 years
Location: Pune (Work from Office)
Work Days: Monday-Friday + Alternate Saturdays | 10:00 AM - 7:00 PM

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field
• 3-5 years of experience in Application Security / Ethical Hacking / Penetration Testing
• Relevant certifications preferred: CEH, OSCP, CompTIA Security+, or equivalent
• Solid understanding of OWASP Top 10, secure coding principles, and common application vulnerabilities
• Prior experience working closely with development teams in a Secure SDLC environment

Key Responsibilities

• Perform penetration testing and vulnerability assessments on web applications, APIs, and mobile platforms
• Conduct secure code reviews and work with developers to fix vulnerabilities early in the SDLC
• Define and enforce application security standards, hardening guidelines, and secure configuration baselines
• Carry out threat modeling for new features and major architectural changes
• Manage vulnerability disclosure, patching cycles, and risk remediation timelines
• Monitor for emerging threats, CVEs, and attack techniques relevant to our tech stack
• Collaborate with DevOps/Cloud teams to secure CI/CD pipelines and cloud infrastructure
• Support incident response efforts when security issues are identified
• Document findings, risk ratings, and remediation guidance clearly for both technical and non-technical stakeholders

Required Skills

• Strong hands-on experience in Ethical Hacking / Penetration Testing (OWASP Top 10, API security, authentication/authorization flaws)
• Practical knowledge of secure coding practices across at least one major stack (e.g., Node.js, Java, Python, .NET)
• Experience with security tools: Burp Suite, OWASP ZAP, Nmap, Metasploit, or similar
• Understanding of Secure SDLC and how to embed security checkpoints into development workflows
• Vulnerability Assessment & Risk Management experience
• Familiarity with cloud security fundamentals (AWS, Azure, or GCP)

Good to Have

• Exposure to ISO 27001 or other compliance/governance frameworks
• Experience securing CI/CD pipelines or container environments (Docker/Kubernetes)