Application Security Engineer (SAST/DAST)

Appit LLC; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Flexible work arrangements

Career growth opportunities

Competitive salaries

Job summary

Appit LLC is seeking an Application Security Engineer in Hyderabad, India, to secure enterprise applications through SAST, DAST, and SCA tools integration into CI/CD pipelines. Responsibilities include conducting security reviews, automating vulnerability detection, and collaborating with development teams for secure coding practices.

Ideal candidates should have over 3 years of experience in application security, strong knowledge of OWASP Top 10, and proficiency in programming languages like Java or Python. We offer competitive salaries, flexible work arrangements, and opportunities for career growth.

Qualifications

• 3+ years of experience in application security or software security engineering.
• Strong understanding of secure SDLC practices.
• Proficiency in at least one programming language for code review.

Responsibilities

• Perform security code reviews and application security testing across web and API applications.
• Integrate security scanning tools into CI/CD pipelines.
• Conduct threat modeling and architecture risk analysis.

Skills

Experience in application security

Hands-on with SAST/DAST tools

Understanding of OWASP Top 10

Proficiency in programming

REST API security testing

Familiarity with container security

Tools

SonarQube

Checkmarx

Fortify

Burp Suite

OWASP ZAP

Snyk

Dependabot

Job description

APPIT Software Solutions is hiring a Application Security Engineer (SAST/DAST) in Hyderabad, India. Secure enterprise applications by integrating SAST, DAST, and SCA tools into CI/CD pipelines and conducting threat modeling at APPIT Software Solutions in Hyderabad.

Responsibilities

• Perform security code reviews and static/dynamic application security testing (SAST/DAST) across web and API applications
• Integrate security scanning tools into CI/CD pipelines to automate vulnerability detection
• Conduct threat modeling and architecture risk analysis for new product features and services
• Collaborate with development teams to remediate identified vulnerabilities and establish secure coding practices
• Develop and maintain secure coding guidelines, security training materials, and OWASP compliance checklists
• Track and report on application security metrics, vulnerability trends, and remediation timelines

Requirements

• 3+ years of experience in application security or software security engineering
• Hands-on experience with SAST tools (SonarQube, Checkmarx, Fortify) and DAST tools (Burp Suite, OWASP ZAP)
• Strong understanding of OWASP Top 10, CWE/SANS Top 25, and secure SDLC practices
• Proficiency in at least one programming language (Java, Python, JavaScript, or Go) for code review
• Experience with REST API security testing and authentication/authorization mechanisms (OAuth 2.0, JWT)
• Familiarity with container security and cloud-native application security principles

Nice to Have

• GWAPT, CEH, or OSWE certification
• Experience with software composition analysis (SCA) tools like Snyk or Dependabot
• Knowledge of GraphQL security testing

About APPIT Software Solutions

APPIT Software Solutions is a leading technology company building AI-powered enterprise products. Join 150+ professionals working on cutting-edge solutions in AI/ML, cloud computing, and digital transformation. We offer competitive salaries, flexible work arrangements, and opportunities for career growth across our global offices.