Appsec Specialist - Lead

Adani; Ahmedabad District; On-site; INR 420,000 - 780,000; Full time

Job summary

Adani is seeking an experienced Application Security Lead in India to guide security assessments, perform penetration testing on web and mobile apps, review code for secure practices, and improve security architectures. You will automate tasks, collaborate with Dev, QA, and DevOps, and drive DevSecOps integration with CI/CD pipelines.

The role requires 8-12 years in application security, strong scripting (Python/Java/JS/TS), and certifications such as CEH/AWS Security.

Qualifications

• Bachelor's degree in computer science, information security, or a related field.
• 8-12 years of experience in application security, including vulnerability assessment and penetration testing.
• Strong understanding of secure coding practices and knowledge of common security vulnerabilities.
• Familiarity with security standards and frameworks such as OWASP, ISO 27001, and NIST.
• Experience with security testing tools and automation.
• Relevant certifications such as CEH, AZ500, AWS Security, Kubernetes, IaC are a plus.
• Excellent communication and collaboration skills.
• Ability to stay up-to-date with the latest security trends, threats, and technologies.

Responsibilities

• Conduct regular security assessments of applications to identify and prioritize vulnerabilities.
• Perform penetration testing on web and mobile applications to simulate real-world cyber-attacks and uncover potential weaknesses.
• Review application code to identify and remediate security flaws, ensuring adherence to secure coding practices.
• Evaluate the overall security architecture of applications and propose improvements to enhance resilience against cyber threats.
• Automate repetitive security tasks to improve efficiency and coverage.
• Work closely with cross-functional teams including developers, QA, DevOps, and IT.
• Strong coding and scripting skills (e.g., Python, Java, JavaScript, TypeScript, etc.); ability to prototype tools or support initiatives directly.
• Hands on experience on IaC -Infrastructure as Code.
• Integrate security testing into CI/CD pipelines (DevSecOps).
• Monitor and respond to security incidents, conducting root cause analysis and implementing corrective actions.
• Stay up to date with the latest security trends, threats, and technologies to continuously improve the security posture of applications.
• Build automation scripts to reduce the repetitive task such as reports, attacking scripts, etc.

Skills

Python

Java

JavaScript

TypeScript

DevSecOps

CI/CD

Automation

Penetration testing

Secure coding

Root cause analysis

Education

Bachelor's degree in Computer Science / Information Security

Tools

OWASP

ISO 27001

NIST

Burp Suite

Nessus

Kubernetes

Terraform

AWS Security

CI/CD tools

Job description

Responsibilities

Strategic Roles and Responsibilities

• Conduct regular security assessments of applications to identify and prioritize vulnerabilities.


• Perform penetration testing on web and mobile applications to simulate real-world cyber-attacks and uncover potential weaknesses.


• Review application code to identify and remediate security flaws, ensuring adherence to secure coding practices.


• Evaluate the overall security architecture of applications and propose improvements to enhance resilience against cyber threats.


• Automate repetitive security tasks to improve efficiency and coverage.


• Work closely with cross-functional teams including developers, QA, DevOps, and IT.


• Strong coding and scripting skills (e.g., Python, Java, JavaScript, TypeScript, etc.); ability to prototype tools or support initiatives directly.


• Hands on experience on IaC -Infrastructure as Code.


• Integrate security testing into CI/CD pipelines (DevSecOps).


• Monitor and respond to security incidents, conducting root cause analysis and implementing corrective actions.


• Stay up to date with the latest security trends, threats, and technologies to continuously improve the security posture of applications.


• Build automation scripts to reduce the repetitive task such as reports, attacking scripts, etc.

People Management

• Provide mentorship and guidance to junior team members.


• Conduct performance reviews and provide constructive feedback.


• Ensure continuous professional development of team members.


• Foster an environment of learning, excellence, and innovation within the team and across teams.

Qualifications

Educational qualifications & Experience:

• Bachelors degree in computer science, Information Security, or related field.


• 8-12 years of experience in application security, including vulnerability assessment and penetration testing.


• Strong understanding of secure coding practices and knowledge of common security vulnerabilities.


• Familiarity with security standards and frameworks such as OWASP, ISO 27001, and NIST.


• Experience with security testing tools and automation.


• Relevant certifications such as CEH, AZ500, AWS Security, Kubernetes, IaC are a plus.


• Excellent communication and collaboration skills.


• Ability to stay up to-date with the latest security trends, threats, and technologies.