Senior Application Security Engineer – Cryptography

Ahy Consulting; Kalyan-Dombivli; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Ahy Consulting, a progressive development agency, seeks a Senior Application Security Engineer – Cryptography for a full-time on-site role in Kalyan Dombivli. You will design and review cryptographic controls, perform secure code reviews, threat modeling, and vulnerability assessments across web/eCommerce platforms.

Collaborate with teams to embed security in the lifecycle and mentor others. Ideal candidates have strong cryptography skills, OWASP knowledge, and hands-on experience with security

Qualifications

• Applied cryptography and security engineering skills, including encryption algorithms, key management.
• TLS/SSL and secure protocol design experience.
• Application security expertise including secure coding, threat modeling and vulnerability assessment.
• Familiarity with OWASP guidelines.
• Hands-on experience with web/eCommerce platforms, APIs and cloud architectures.
• Proficient with security tools and interpreting results for remediation.
• Strong analytical and communication abilities; relevant degree or equivalent; CISSP/OSCP/CSSLP advantages.

Responsibilities

• Design, implement and review cryptographic controls within web and application architectures.
• Perform secure code reviews, threat modeling and vulnerability assessments.
• Collaborate with development teams to integrate security best practices.
• Create and maintain security standards and guidelines.
• Mentor team members on secure development practices.
• Contribute to continuous improvement of security tools, processes and documentation.

Skills

Applied cryptography

Threat modeling

Vulnerability assessment

Secure coding

Security tooling

Communication skills

Education

Bachelor’s degree in CS/Info Security

Tools

SAST/DAST scanners

Code review tools

Dependency analysis

Job description

Company Description Ahy Consulting is a progressive development agency specializing in eCommerce growth, backed by 17 years of industry experience. The team has closely followed the evolution of the internet and leverages this knowledge to optimize online businesses. Since 2018, Ahy Consulting has consistently delivered an average 35% increase in conversions within the first six months for eCommerce support projects. The company’s operational processes are designed to drive growth and scale, encouraging both teams and business owners to push beyond comfort zones. For more information, candidates can visit www.ahyconsulting.com.

Role Description The Senior Application Security Engineer – Cryptography is a full-time, on-site role based in Kalyan Dombivli. This role focuses on designing, implementing, and reviewing cryptographic controls within web and application architectures supporting eCommerce platforms. The engineer will perform secure code reviews, threat modeling, and vulnerability assessments, with particular emphasis on encryption, key management, and secure data transmission. Daily responsibilities include collaborating with development teams to integrate security best practices, creating and maintaining security standards and guidelines, and responding to security incidents related to application and cryptographic components. The role also involves mentoring team members on secure development practices and contributing to continuous improvement of security tools, processes, and documentation.

Qualifications

• Applied cryptography and security engineering skills, including experience with encryption algorithms, key management, TLS/SSL, and secure protocol design.
• Application security expertise such as secure coding practices, threat modeling, vulnerability assessment, and familiarity with OWASP guidelines.
• Hands‑on experience with web and eCommerce platforms, APIs, and cloud‑based architectures, with the ability to embed security into the development lifecycle.
• Proficiency with security tools (e.g., SAST/DAST scanners, dependency analysis, code review tools) and interpreting their results to guide remediation.
• Strong analytical and problem‑solving abilities, with attention to detail and a methodical approach to diagnosing and mitigating security risks.
• Effective communication skills, including the ability to explain complex security and cryptographic concepts to technical and non‑technical stakeholders.
• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience; advanced security certifications (e.g., CISSP, OSCP, CEH, CSSLP) are an advantage.
• Prior experience in a senior or lead security engineering role, preferably within high‑growth, technology‑driven, or eCommerce environments.