Senior Application Security Engineer

First Advantage; India; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

First Advantage is seeking a Senior Application Security Engineer to enhance security across multiple product applications. This role involves driving security assessments, collaborating with teams, and implementing secure coding practices.

The ideal candidate will have 3-5 years of application security experience, relevant certifications, and practical knowledge of threat modeling and vulnerability scanning. Join us to contribute to a strong security posture across the enterprise.

Qualifications

• 3-5 years of experience in application security, penetration testing, and web application/API development.
• Familiarity with threat modeling and vulnerability scanning.
• Practical knowledge in source code review.

Responsibilities

• Design and implement secure application code bases for SDLC.
• Serve as a liaison between third-party testing vendors and internal teams.
• Perform threat modeling and application design reviews.
• Collaborate with multiple teams to ensure a strong security posture.

Skills

Application security engineering

Penetration testing

Web application development (.NET/C#, Java, JavaScript)

System administration

Networking

Information security

Education

Relevant industry certifications (OffSec, SANS, isc2)

Tools

Static and dynamic application security testing tools

Vulnerability scanners

Job description

Senior Application Security (AppSec) Engineer

What You’ll Do

The Senior AppSec Engineer is an individual contributor role reporting to the Senior Manager of Application Security. The person in this position will drive security assessments for many different First Advantage product applications to consistently enhance security posture and reduce risk across the enterprise.

Responsibilities

• Design and implement secure application code bases and processes to support the software development life cycle (SDLC) across the global enterprise.
• Serve as a liaison between third-party penetration testing vendors and internal application teams, collaborating to schedule, scope, test, and remediate.
• Review security findings from multiple tooling sources as well as customer inquiries, assessing validity and risk levels.
• Perform threat modeling and application design reviews, working closely with stakeholders.
• Configure SAST and DAST tooling, analyze findings, and address ticketing and remediation with multiple other teams.
• Contribute to the development and automation of security testing tools and processes.
• Assist with incident response (IR) activities that may relate to application security.
• Partner with teams such as SecOps, Threat Intel/Hunt, Vulnerability Management, DevOps, AppDev, Networking, and Product to ensure a strong security posture across the organization.

What You May Need To Be Successful

• 3-5 years of experience with a combination of application security engineering, penetration testing, web application/API development (.NET/C#, Java, JavaScript), system administration, networking, and information security.
• Relevant industry certifications from organizations such as OffSec, SANS, or isc2.
• Familiarity with web application/API testing, static code analysis, threat modeling, and vulnerability scanners.
• Practical knowledge with source code review to address common security issues.

Equal Employment Opportunities at First Advantage
First Advantage is an equal opportunity employer. We are committed to providing a workplace and recruitment process that is free from unlawful discrimination, harassment, and retaliation. Employment decisions at First Advantage are based solely on qualifications, merit, and business needs. We do not discriminate in any aspect of employment on the basis of race, color, national origin, ancestry, citizenship, religion, creed, sex, gender identity, gender expression, sexual orientation, marital or family status, pregnancy, age, physical or mental disability, medical condition, genetic information, veteran or military status, or any other characteristic protected by applicable law.