Product/Application Security Engineer

ACL Digital; Pune District; On-site; INR 800,000 - 1,200,000; Full time

Job summary

ACL Digital in Pune is seeking a security professional to lead application security testing and cloud posture assessments. You will perform VAPT, API testing, and collaborate with engineering teams to remediate vulnerabilities.

The role emphasizes Secure SDLC, DevSecOps, and threat modeling to strengthen platform security across Azure and AWS. Relevant tooling experience is required, with a focus on practical hands-on execution.

Qualifications

• Hands-on experience with Burp Suite, Nessus, Qualys, Invicti, and AppScan.
• Strong knowledge of OWASP, Secure SDLC, and DevSecOps practices.
• Experience with threat modeling and vulnerability remediation.

Responsibilities

• Perform Application Security Assessments, VAPT, and API testing.
• Conduct Azure/AWS cloud security assessments, posture validation, and infrastructure hardening.
• Support Secure SDLC, DevSecOps, and threat modeling.
• Collaborate with engineering teams on vulnerability remediation and security posture improvement.

Skills

OWASP

Secure SDLC

DevSecOps

Tools

Burp Suite

Kali Linux

Nessus

Qualys

Invicti

HCL AppScan

Threat Modeler

Job description

Key Responsibilities:

• Perform Application/Product Security Assessments, VAPT, and API testing.
• Conduct Azure/AWS cloud security assessments, posture validation, and infrastructure hardening.
• Support Secure SDLC, DevSecOps, and threat modeling.
• Collaborate with engineering teams on vulnerability remediation and security posture improvement.

Required Skills & Tools:

• Hands-on experience with Burp Suite, Kali Linux, Nessus, Qualys, Invicti, HCL AppScan, and Threat Modeler.
• Strong knowledge of OWASP, Secure SDLC, and DevSecOps.

Preferred Qualifications:

• Python/Bash scripting.
• IoT, embedded, or mobile application security testing.
• Exposure to BlackDuck or Coverity.
• Background in Product Engineering or Cloud Product teams