Associate, Application Development Security Engineer

Revantage, A Blackstone Portfolio Company; Bengaluru; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Revantage in Bengaluru, India, is seeking a mid-level Application Development Security Engineer to partner with software, DevOps and cloud teams to embed security into the SDLC and CI/CD pipelines. You will perform SAST, DAST, SCA, IaC and container security assessments, and support 24x7 operations with rotating on-call for US nights.

The role requires a strong foundation in secure coding, cloud platforms (Azure/AWS/GCP) and collaboration with engineering to enable rapid, secure software

Qualifications

• Strong understanding of secure software‑development principles and common threat frameworks.
• Experience designing and implementing secure CI/CD pipelines and controls.
• Working knowledge of Azure DevOps, GitHub Actions and similar platforms.
• Hands‑on with SAST, DAST, SCA, IaC, container, API and secrets scanning tools.
• Familiarity with Kubernetes and cloud platforms (Azure, AWS, GCP).
• Experience scripting in Python, PowerShell, Bash or JavaScript.
• Good collaboration and communication with engineering and product teams.
• Knowledge of OAuth/OpenID Connect and secure API development.

Responsibilities

• Coordinate with Information Security and support its mission and priorities.
• Integrate security in SDLC using DevSecOps and secure‑by‑design practices.
• Implement and maintain automated security testing and controls in CI/CD.
• Perform SAST, DAST, SCA, IaC, API, container and secrets security assessments.
• Conduct threat modeling, secure‑design reviews and architecture reviews.
• Identify and remediate vulnerabilities in applications and supply chain.
• Partner with developers to strengthen secure coding without slowing delivery.
• Develop security guardrails for CI/CD platforms (Azure DevOps, GitHub, GitLab, Jenkins).
• Secure IaC deployments using Terraform, ARM/Bicep, CloudFormation and alike.
• Assess and secure Kubernetes, Docker, serverless workloads and APIs.
• Evaluate open‑source dependencies for supply‑chain risk.
• Develop reusable templates and guidance for developer enablement.
• Research emerging threats and propose practical improvements.
• Participate in incident response focusing on app‑layer vulnerabilities.
• Support 24x7 operations with on‑call coverage for US nights and holidays.

Skills

Secure SDLC

DevSecOps

CI/CD security

SAST

DAST

SCA

IaC

Kubernetes

Docker

Python scripting

Azure

AWS

GCP

Education

Bachelor's degree in CS/SE or related field

4–6 years in application security/DevSecOps

CI/CD security experience

Tools

Burp Suite

SonarQube

GitHub CodeQL

Snyk

Veracode

ShiftLeft

Terraform

AKS

Jenkins

Job description

ABOUT REVANTAGE

Revantage, a Blackstone Real Estate portfolio company, is a global provider of corporate services.

With a corporate purpose of ‘In Pursuit of Better,’ Revantage delivers value-added services and world-class talent for Blackstone Real Estate portfolio companies, spanning diverse asset classes, including residential, logistics, office, hospitality and retail sectors. The company’s footprint extends across North America, Europe and Asia Pacific.

Creating a culture that inspires impact and momentum requires the right team. We know what it takes to lead an industry, and are looking for leaders who seek constant growth, want to excel, and continuously improve upon themselves and the industry.

In addition to supporting Revantage, we also recruit for Blackstone Real Estate portfolio companies, giving you the unique opportunity to work within a network of best-in-class professionals across a broad real estate platform.

India

With offices in Bengaluru and Gurugram, our teams in India deliver expertise, innovation and operational excellence that support thousands of assets across logistics, data centers, residential, commercial and hospitality.

Whether you’re building new capabilities, driving critical initiatives or strengthening partnerships, you’ll have the opportunity to truly Build What Matters.

ROLE SUMMARY

We are seeking a mid-level Application Development Security Engineer for , a Blackstone Real Estate portfolio company and the largest owner, manager and developer of high-quality student housing communities in the United States. This role is based in Bengaluru, India, hired through Revantage India and reports to Chief Information Security Officer (CISO).

The Application Development Security Engineer partners with software engineering, DevOps, cloud engineering and product teams to integrate security throughout the Software Development Lifecycle (SDLC). The role champions secure‑by‑design principles through automated security testing, secure coding practices, CI/CD security controls, cloud‑native application security and developer enablement, helping ensure applications remain resilient against modern threats while enabling rapid and secure software delivery.

Working hours will provide meaningful daily overlap with US Central Time. The role also participates in rotating on‑call coverage for US nights and weekends and provides coverage on US and India holidays to support uninterrupted operations.

PRIMARY ROLE

• Coordinate with the broader Information Security team and perform duties that support its primary mission and priorities.
• Integrate security throughout the Software Development Lifecycle using DevSecOps and secure-by-design practices.
• Implement and maintain automated security testing and security controls within CI/CD pipelines.
• Perform static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), Infrastructure as Code (IaC), API, container and secrets‑security assessments.
• Conduct application threat modeling, secure‑design reviews and application‑security architecture reviews for new applications and cloud services.
• Identify, prioritize and coordinate remediation of application and software‑supply‑chain vulnerabilities.
• Partner closely with software developers to strengthen secure‑coding practices and resolve security findings without unnecessarily slowing delivery.
• Develop and maintain security guardrails for Azure DevOps, GitHub, GitLab, Jenkins and other CI/CD platforms.
• Secure Infrastructure as Code deployments using Terraform, ARM/Bicep, CloudFormation and similar technologies.
• Assess and secure Kubernetes, Docker, serverless, APIs and other cloud‑native workloads.
• Evaluate open‑source dependencies and third‑party software for supply‑chain risk.
• Develop and maintain security standards, reusable templates, developer guidance and enablement materials.
• Research emerging application‑security threats, assess their relevance to ACC and recommend practical improvements.
• Participate in incident response with emphasis on application‑layer vulnerabilities and coordinate remediation with engineering and operations teams.
• Support a 24x7 operational environment through scheduled rotation and on‑call coverage for US nights and weekends, US and India holidays, incidents, critical production events and business‑continuity needs.
• Perform other projects and responsibilities as assigned.

QUALIFICATIONS & SKILLS

• Strong understanding of secure software‑development principles and common threat frameworks, including the OWASP Top 10, CWE and MITRE ATT&CK.
• Experience designing and implementing secure CI/CD pipelines and controls.
• Working knowledge of Azure DevOps, GitHub Actions, GitLab CI, Jenkins and similar platforms.
• Hands‑on experience with SAST, DAST, SCA, IaC, container, API and secrets‑scanning tools, including Burp Suite, SonarQube, GitHub CodeQL, Snyk, Veracode and ShiftLeft.
• Familiarity with Docker, Kubernetes, Azure Kubernetes Service (AKS) and similar container platforms.
• Experience with scripting and automation using Python, PowerShell, Bash or JavaScript.
• Working knowledge of cloud platforms, including Microsoft Azure, Amazon Web Services (AWS) and Google Cloud.
• Strong understanding of OAuth, OpenID Connect, authentication, authorization and secure API development.
• Excellent collaboration and communication skills, particularly when working with software‑engineering, DevOps, cloud and product teams.
• Proficiency in the secure and responsible use of generative AI tools such as ChatGPT, Claude, Microsoft Copilot and Google Gemini.
• Experience integrating AI security into the Secure Software Development Lifecycle, including identifying and mitigating risks involving AI models, APIs, prompt injection, data exposure, insecure model interactions and third‑party AI services.
• Must hold, or be capable of passing within one year of the hire date, Exam AI‑901: Microsoft Azure AI Fundamentals.
• Administrator‑level experience with enterprise security tools, including Microsoft Defender; CrowdStrike Falcon Complete/MDR, Identity Threat Protection, Shield, Recon+, Cloud Security and Next‑Gen SIEM; Wiz; Zscaler ZIA, ZPA, ZDX and ZTA; and Proofpoint TAP and DLP.
• Demonstrated ability to extract, validate and communicate operational reports and security metrics from these platforms.

EDUCATION & EXPERIENCE

• Bachelor’s degree in computer science, software engineering, cybersecurity or a related field, or equivalent professional experience.
• Four to six years of application security, DevSecOps, software‑engineering or cloud‑security experience.
• Experience integrating security into CI/CD pipelines and applying secure software‑development methodologies.
• Experience performing application‑security assessments and secure code reviews.

CERTIFICATIONS

• ISC2 Certified Secure Software Lifecycle Professional (CSSLP).
• GIAC Web Application Penetration Tester (GWAPT).
• GIAC Certified Web Application Defender (GWEB).
• Microsoft Certified: Azure Security Engineer Associate.
• Certified Kubernetes Security Specialist (CKS).
• Microsoft Certified: DevOps Engineer Expert.

Job Applicant Privacy Notice

_ EEO Statement _

The Company is an equal opportunity employer. In accordance with applicable law, we prohibit discrimination against any applicant, employee, or other covered person based on any legally recognized basis, including, but not limited to: veteran status, uniformed servicemember status, race, color, caste, immigration status, religion, religious creed (including religious dress and grooming practices), sex, gender, gender expression, gender identity, marital status, sexual orientation, pregnancy (including childbirth, lactation or related medical conditions), age, national origin or ancestry, citizenship, physical or mental disability, genetic information (including testing and characteristics), protected leave status, domestic violence victim status, or any other consideration protected by federal, state or local law. We are committed to providing reasonable accommodations, if you need an accommodation to complete the application process, please email [e-mail]