Application Security Specialist

Pearson India Education Services Pvt Ltd; Bengaluru; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Pearson India Education Services Pvt Ltd is seeking a Senior Specialist, Application Security to safeguard our applications throughout the SDLC. The role focuses on secure code reviews, vulnerability identification, and enabling development teams to build secure, resilient systems.

Responsibilities include integrating security into CI/CD, performing penetration tests, and delivering security trainings to developers. Strong experience with SAST/DAST/SCA and cloud security is required.

Qualifications

• 6+ years of combined experience in software development, cybersecurity, and application security.
• Hands-on experience with SAST, DAST, and SCA tools.
• Strong knowledge of secure SDLC practices and CI/CD security integration.
• Proficiency in Python, Java, or JavaScript.
• Understanding of AI technologies such as Generative AI and Agentic systems.
• Knowledge of security frameworks (OWASP Top 10, NIST, CIS).
• Strong grasp of cryptography, authentication, and authorization protocols.
• Experience in threat modeling.
• Familiarity with cloud and container security (AWS, Azure, Kubernetes).
• Excellent communication and collaboration skills.

Responsibilities

• Perform secure code reviews, dependency analysis (SCA), and dynamic security testing (DAST) across applications.
• Conduct manual security assessments and penetration testing to identify vulnerabilities.
• Integrate security best practices into SDLC and CI/CD pipelines.
• Collaborate with engineering teams to design and implement secure-by-design applications.
• Design and implement robust authentication and authorization mechanisms.
• Drive adoption of modern application security practices and frameworks.
• Stay updated with threats, vulnerabilities, and mitigation techniques.
• Deliver secure coding training sessions and awareness programs for developers.
• Conduct risk assessments and provide actionable mitigation recommendations.

Skills

Secure SDLC principles

Cross-functional collaboration

Communication

Education

Bachelor’s degree in Computer Science or related field

Industry certifications such as OSCP/OSWE/GWAPT/eWPT/CISSP/CSSLP/CEH

Tools

SAST tools

DAST tools

SCA tools

Python

Java

JavaScript

Cloud (AWS/Azure)

Kubernetes

Job description

Specialist, Application Security

Job Title: Specialist, Application Security Job Description: We are seeking a highly skilled and motivated Application Security Engineer to join our growing security team. In this role, you will play a critical part in securing our applications by embedding security throughout the Software Development Lifecycle (SDLC), identifying vulnerabilities, and enabling development teams to build secure, resilient systems.

Key Responsibilities

• Perform secure code reviews , dependency analysis (SCA) , and dynamic security testing (DAST) across a range of applications


• Conduct manual security assessments and penetration testing to identify vulnerabilities


• Integrate security best practices into SDLC and CI/CD pipelines


• Collaborate closely with engineering teams to design and implement secure-by-design applications


• Design and implement robust authentication and authorization mechanisms


• Drive adoption of modern application security practices and frameworks


• Stay up to date with the latest security threats, vulnerabilities, and mitigation techniques


• Deliver secure coding training sessions and awareness programs for developers


• Conduct risk assessments and provide actionable recommendations for mitigation

Qualifications & Skills

• 6+ years of combined experience in software development, cybersecurity, and application security


• Hands-on experience with SAST, DAST, and SCA tools


• Strong knowledge of secure SDLC practices and CI/CD security integration


• Proficiency in Python, Java, or JavaScript


• Understanding of AI technologies such as Generative AI and Agentic systems


• Knowledge of security frameworks (OWASP Top 10, NIST, CIS)


• Strong grasp of cryptography, authentication, and authorization protocols


• Experience in threat modeling (experience with commercial tools is a plus)


• Familiarity with cloud and container security (AWS, Azure, Kubernetes)


• Excellent communication and collaboration skills

Preferred Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related field


• Industry certifications such as: OSCP / OSWE GWAPT / eWPT CISSP, CSSLP, or CEH (with application security focus)

Experience Level Senior Level