Application Security Engineer (SAST / DAST / DevSecOps / SCA)

Qualizeal India; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Qualizeal India is seeking an Application Security Engineer to embed security across the software development lifecycle. You will perform SAST, DAST, and SCA assessments, validate vulnerabilities, and guide remediation while integrating security into CI/CD pipelines.

The role requires 4–6 years of hands-on security experience, strong knowledge of OWASP, and excellent communication to enable development and DevOps teams in a fast-paced environment.

Qualifications

• 4–6 years of experience in application security.
• Hands-on experience with SAST/DAST/SCA and secure SDLC.
• Experience integrating security into DevSecOps and CI/CD pipelines.
• Familiarity with OWASP standards and secure coding practices.

Responsibilities

• Conduct SAST, DAST, and SCA assessments for web apps and APIs.
• Validate vulnerabilities and provide remediation guidance.
• Integrate security testing into CI/CD pipelines.
• Perform secure code reviews and enable developers on security practices.
• Track remediation progress and prepare security dashboards.
• Collaborate with development and DevOps teams.

Skills

SAST

DAST

SCA

Secure SDLC

DevSecOps

CI/CD security

OWASP

Secure coding

Analytical skills

Communication skills

Tools

CI/CD tools

Job description

Application Security Engineer (SAST / DAST / DevSecOps / SCA)

Experience: 4-6 years

About the role

Embed security across the software development lifecycle through application security testing, DevSecOps automation, secure coding governance, and remediation management.

Key responsibilities

• Conduct SAST, DAST, and SCA assessments for web applications and APIs.
• Validate vulnerabilities and provide remediation guidance.
• Integrate security testing into CI/CD pipelines.
• Perform secure code reviews and support developer enablement.
• Track remediation and prepare security dashboards.
• Collaborate with development and DevOps teams.

What we're looking for

• Strong hands‑on experience with SAST, DAST, SCA, and Secure SDLC.
• Experience with DevSecOps and CI/CD security integration.
• Knowledge of OWASP and secure coding practices.
• Strong analytical and communication skills.

Preferred qualifications

• Cloud security exposure.
• Relevant security certifications and Agile experience.