Risk Consultant – Digital Risk, Application Security

Jobtailor; Coimbatore District; On-site; INR 600,000 - 900,000; Full time

Job summary

Jobtailor in India is seeking an entry-to-mid level Application Security professional to participate in security engagements, threat modelling, and secure SDLC reviews across web and API projects. You will collaborate with asset owners, developers and stakeholders to communicate findings and drive remediation in a fast-paced client environment.

The role requires 1–2 years of experience with OWASP Top 10, SAST/DAST tools, and Azure security services, and a BE/BTech or MSc/MCA degree.

Qualifications

• Bachelor's degree in BE/BTech or MSc/MCA.
• 1–2 years in Application Security or Secure SDLC.
• Experience with threat modelling methodologies (STRIDE, PASTA).
• Knowledge of OWASP Top 10 and common vulnerabilities.
• Familiarity with SAST/DAST and security testing tools.
• Strong understanding of web/API architectures (Azure).

Responsibilities

• Participate in application security engagements, including Threat Modelling and SDL reviews
• Perform architecture and design security assessments to identify potential risks and control gaps
• Evaluate secure SDLC controls, including design reviews, code security practices, and release governance
• Work closely with asset owners, developers, and stakeholders to explain findings and remediation actions
• Document security findings and assist in preparing client reports and presentations
• Track remediation efforts and follow up with stakeholders to ensure closure
• Manage day-to-day client relationships, leading client meetings, working sessions, and status reporting

Skills

Threat Modelling

Secure SDLC

OWASP Top 10

SAST/DAST

Azure Security

Stakeholder Communication

Education

Bachelor's degree in BE/BTech or MSc/MCA

Tools

SAST tools

DAST tools

Job description

Responsibilities

• Participate in application security engagements, including Threat Modelling and SDL reviews
• Perform architecture and design security assessments to identify potential risks and control gaps
• Evaluate secure SDLC controls, including design reviews, code security practices, and release governance
• Work closely with asset owners, developers, and stakeholders to explain findings and remediation actions
• Document security findings and assist in preparing client reports and presentations
• Track remediation efforts and follow up with stakeholders to ensure closure
• Manage day-to-day client relationships, leading client meetings, working sessions, and status reporting

Requirements

• Bachelor's degree in B.E./B.Tech (Computer Science, IT, Electronics) or M.Sc./MCA
• At least 1-2 years of experience in Application Security / Secure SDLC / Threat Modelling
• Experience in Threat Modelling methodologies (STRIDE, PASTA, etc.)
• Secure SDLC practices and security controls
• Knowledge of OWASP Top 10 and common application vulnerabilities
• Familiarity with SAST/DAST and security testing tools
• Strong understanding of application architecture (web, APIs, Azure, Power automate)
• Azure OpenAI Service, Azure AI Foundry, Azure Machine Learning
• Ability to work in fast-paced client environments with multiple priorities

Core Competencies

Demonstrates expertise in Application Security, Secure SDLC practices, and Threat Modelling methodologies, with a strong ability to assess architecture and design security. Proven skills in client relationship management and effective communication of security findings and remediation actions.