Application Security Engineer III

Phenom; Hyderabad; On-site; INR 1,200,000 - 2,400,000; Full time

Benefits offered by this job

Health and wellness benefits

Flexible hours

Career development opportunities

Location-based perks in Hyderabad

Job summary

Phenom Hyderabad-based team is seeking a security engineer to identify and triage vulnerabilities across the ITX Platform, collaborate with engineering to implement fixes, and drive secure development practices. The role emphasizes vulnerability management, SAST/DAST usage, and reporting to leadership.

The ideal candidate will have experience with AWS, microservices, and threat modeling, along with scripting skills in Terraform, Java, Python, and Ruby to automate security tasks and strengthen

Qualifications

• Experience with AWS cloud environments and security controls.
• Experience with microservices architectures and SaaS platforms.
• Proficiency in Agile software development.
• Coding in scripting and programming languages such as Terraform, Java, Python, Ruby.
• Knowledge of security principles and common exploitation techniques.
• Experience implementing and supporting a vulnerability management program.
• Familiarity with DAST/SAST and infrastructure automation via APIs.
• Understanding of cybersecurity tools (SIEM, IPS, XDR).
• Experience with threat modeling and vulnerability frameworks (OWASP, CVSS).
• Ability to write reports and communicate security findings to varied audiences.

Responsibilities

• Research, identify, triage vulnerabilities affecting Phenom ITX Platform and assess severity.
• Collaborate with engineering to evolve secure development and left-shift practices.
• Implement fixes to remediation plans with the engineering team.
• Deploy and utilize SAST/DAST/SCA to identify vulnerabilities and report to production teams.
• Maintain progress reports on vulnerabilities and ensure closure per Phenom standards.
• Work with business/support teams to shape remediation strategies for vulnerabilities.
• Prepare vulnerability assessment reports for peers and leadership.
• Support governance and improve cybersecurity metrics and processes.
• Stay updated on threats and integrate secure practices into product design.
• Support Secure Architecture & SDLC deployment to ensure robust security.

Skills

AWS Security

Microservices Security

Agile Development

Scripting Languages

InfoSec Principles

Vulnerability Management

DAST & SAST

Threat Modeling

Security Tools

Cyber Kill Chain

Tools

Terraform

Java

Python

Ruby

Job description

Phenom Intro:

Our purpose is to help a billion people find the right job! Phenom is an AI-Powered talent experience platform that is redefining the HR tech space. We have grown into a global organization with offices in 6 countries and over 2,000 employees. As an HR tech unicorn organization, innovation and creativity is within our DNA. Come help us make every talent moment Phenomenal!

Job Requirements

Phenom Intro:

Our purpose is to help a billion people find the right job! Phenom is an AI-Powered talent experience platform that is redefining the HR tech space. We have grown into a global organization with offices in 6 countries and over 2,000 employees. As an HR tech unicorn organization, innovation and creativity is within our DNA. Come help us make every talent moment Phenomenal!

What You’ll Do

• Research, identify and analyze and triage vulnerabilities that could affect Phenom ITX Platform and its supporting infrastructure, and determine its severity, exploitability and corrective action recommendations, summarizing and reporting results.
• Collaborate with engineering/development teams to evolve software assurance processes to address security risks, and help teams learn and adopt shift-security-to-left practices.
• Work on implementing the required fixes to remediate the vulnerabilities in collaboration with the engineering team
• Deploy, improve and utilize SAST/DAST/SCA and other cybersecurity solutions to identify and communicate security vulnerabilities to Phenom production teams
• Maintain and report progress on the state of application vulnerabilities and elevate as necessary to ensure vulnerability issues are closed and handled in a manner consistent with Phenom standards
• Work closely with the business, support and production teams to provide input and guidance on development of planned remediation plans and strategies to solve identified vulnerabilities
• Use technical writing and effective communications to prepare and deliver vulnerability assessment result reports to all levels of audiences (peers and or leadership).
• Drive compliance support and improvements over time through the management, analysis and tracking of vulnerabilities discovered through audits, products or collaborations.
• Perform research and analytics and stay apprised on new security vulnerability, threats, risks, attack tools and techniques to contribute and improve Phenom's Threat model and collaborate with senior engineering and product management staff to incorporate effective security standards and controls into product design.
• Help in the deployment of Phenom Secure Architecture & Software Development program to support the best cybersecurity development practice, and ensure Phenom ITX Platform is highly secure, resilient and aligned with business and product development strategy.
• Continuously review and identify security improvement opportunities in existing processes, services, and workflows to ensure Phenom ITX platform is robust against current and future cybersecurity threats.
• Support cybersecurity process activities including security requirements definition, threat modelling, code reviews and cyber risk assessment.
• Support on development and maintenance of a 'security by default' standard to be used in the development, infrastructure, or any other technology project.
• Deliver training on Security Development Lifecycle to engineering/development teams
• Contribute to the review of internal processes and activities and assist in identifying potential opportunities for improvement and automation.
• Drive continuous improvement activities to define, measure, visualize and improve key cyber security metrics related to Application Security.
• Provide analytic support to answer questions about vulnerabilities, and general threat intelligence trends

Work Experience

• Experience with Amazon Web Services cloud environments and its security controls and their corresponding challenges.
• Experience with microservices architectures & distributed Platforms especially in the SaaS businesses
• Experience using Agile software development
• Coding Experience in Scripting & programming languages (such as Terraform, Java, Python, Ruby, etc.)
• Knowledge of information security principles (Confidentiality, Integrity, Availability Authentication & Public Key Infrastructure (PKI), Data Security or Cryptography), and understanding of common exploitation techniques and mitigation.
• Experience implementing, managing, and supporting a vulnerability management program (process and technology).
• Experience and well-known understanding of Dynamic and Static Application Security Testing (DAST & SAST) and infrastructure automation/development utilizing APIs.
• Understanding of the main cybersecurity tools (SIEM, IPS, XDR, etc.) and how they help to protect an application.
• Experience working with Threat modeling (e.g., STRIDE, PASTA, FAIR, Security Cards) and vulnerability frameworks standards (e.g., OWASP, CVSS, CWE) with a good understanding of the Cyber Kill Chain and pervasive threat attack methods and remediation.
• Thought leadership, critical thinking, strong organizational skills, report writing skills to senior level, ability to prioritize and multitask

Benefits

We want you to be your best self and to pursue your passions!

• Health and wellness benefits/programs to support holistic employee health.
• Flexible hours and working schedules, as well as parental leave for new parents.
• Growing organization with career pathing and development opportunities.
• Tons of perks and extras in every location for all Phenoms!

Diversity, Equity, & Inclusion

Our commitment to diversity runs deep! Diversity is essential to building phenomenal teams, products, and customer experiences. Phenom is proud to be an equal opportunity employer taking collective action to build a more inclusive environment where every candidate and employee feels welcomed. We recognize there is more to be done. Our teams are committed to continuous improvement until these powerful ideas are ingrained in our culture for Phenom and employers everywhere!