Application Security Executive

Weekday AI; Pune District; On-site; INR 500,000 - 1,300,000; Full time

Job summary

Weekday AI is seeking an Application Security Executive in Pune with 3–6 years of cybersecurity and application security experience. You will identify vulnerabilities, implement controls, and drive security assessments aligned with policies and industry best practices.

The role emphasizes secure development, vulnerability management, and risk mitigation with potential familiarity in financial software or asset-management contexts. Collaboration with development and operations teams is essential.

Qualifications

• Strong knowledge of Application Security and Cybersecurity principles.
• Experience in application vulnerability assessment and remediation.
• Understanding of OWASP Top 10, secure coding practices, and common web vulnerabilities.
• Familiarity with security testing tools, scanners, and pentesting concepts.

Responsibilities

• Assess the security of web and mobile applications, APIs, and internal systems.
• Identify, analyze, and prioritize vulnerabilities using standard methodologies.
• Coordinate or perform SAST, DAST, and SCA activities.
• Review architecture to uncover security weaknesses and ensure secure coding practices.

Skills

Application Security

Cybersecurity

Vulnerability assessment

SAST

DAST

SCA

OWASP Top 10

Secure coding

API security

Encryption

Tools

Vulnerability scanners

Job description

This role is for one of Weekday’s clients
Salary range: Rs 500000 - Rs 1300000 (ie INR 5 - 13 LPA)

Min Experience: 3+ years
Location: Pune
JobType: full-time

We are looking for a skilled and detail-oriented Application Security Executive with 3–6 years of experience in cybersecurity, application security, and information risk management. The ideal candidate will be responsible for identifying application-level vulnerabilities, implementing security controls, conducting security assessments, and ensuring that applications comply with organizational security policies and industry best practices.

The candidate should have a strong understanding of secure software development, vulnerability management, application testing, and risk mitigation. Experience in the mutual funds or asset management industry will be an added advantage, particularly for candidates familiar with financial applications, investment platforms, and systems that handle sensitive financial and customer information.

Key Responsibilities

1. Application Security Management

• Assess the security of web applications, mobile applications, APIs, and internal business systems.
• Identify, analyze, and prioritize security vulnerabilities using appropriate assessment methodologies.
• Conduct or coordinate application security testing, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).
• Review application architecture and design to identify potential security weaknesses.
• Ensure applications follow secure coding practices and established security standards.

2. Vulnerability Assessment and Risk Mitigation

• Perform regular vulnerability assessments and coordinate penetration testing activities.
• Track identified vulnerabilities and collaborate with development and technology teams to ensure timely remediation.
• Evaluate security risks based on severity, exploitability, and business impact.
• Maintain vulnerability registers, assessment reports, and remediation documentation.
• Support root cause analysis and recommend preventive measures to reduce recurring security issues.

3. Cybersecurity Compliance and Governance

• Implement and monitor application security policies, procedures, and controls.
• Support compliance with applicable cybersecurity regulations, internal standards, and industry frameworks.
• Assist with security audits, risk assessments, and compliance reviews.
• Maintain evidence and documentation required for internal and external audits.
• Promote security awareness and encourage the adoption of security-by-design principles across technology teams.

4. Collaboration and Stakeholder Management

• Work closely with software developers, IT operations, infrastructure, and cybersecurity teams.
• Provide actionable recommendations to address application security findings.
• Participate in security reviews during application development, testing, deployment, and maintenance.
• Communicate security risks, remediation priorities, and assessment outcomes to relevant stakeholders.

Must-Have Skills

• Strong knowledge of Application Security and Cybersecurity principles.
• Experience in application vulnerability assessment and remediation.
• Understanding of OWASP Top 10, secure coding practices, and common web application vulnerabilities.
• Familiarity with security testing tools, vulnerability scanners, and penetration testing concepts.
• Knowledge of authentication, authorization, encryption, API security, and access controls.
• Strong analytical, problem-solving, documentation, and communication skills.

Good-to-Have Skills

• Exposure to mutual funds, asset management, investment platforms, or financial services technology.
• Understanding of financial data protection, regulatory compliance, and information security risk management.
• Familiarity with cloud security, DevSecOps, CI/CD pipelines, and security automation.
• Relevant certifications such as CEH, Security+, CSSLP, or other recognized cybersecurity qualifications.