Senior Application Security Specialist

IntouchCX; Hyderabad; On-site; INR 3,200,000 - 4,200,000; Full time

Job summary

IntouchCX in Hyderabad, India, seeks a Senior Application Security Specialist to assess and secure in-house apps and OSS telephony solutions. You will collaborate with the security analyst team on new initiatives and build in-house tools for threat monitoring and vulnerability management.

The role requires hands-on experience with code reviews, penetration testing, and integrating security testing into CI/CD. Familiarity with .NET, Python, and OWASP frameworks is a plus.

Qualifications

• Bachelor's degree in CS or Information Security or 5 years of equivalent experience.
• Security certifications such as CISSP, C|ASE, GPEN, or OSCP.
• Hands-on experience in application security assessments and pentesting.
• Proficiency with .NET (C#), Python, and ASP.
• Experience deploying security testing tools in CI/CD.

Responsibilities

• Assess software and applications for security vulnerabilities via code reviews, scanning, fuzzing, and manual tests.
• Collaborate with development teams to identify security impacts and mitigation strategies.
• Develop and integrate tools to support vulnerability testing in CI/CD pipelines.
• Provide security reviews for code-release workflows.
• Champion SSDLC implementation and operation.
• Document issues and communicate findings to developers and infra teams.
• Liaise with third parties to perform assessments.
• Engage in client meetings to address secure development inquiries.

Skills

Security mindset

Team collaboration

Threat modeling

OWASP knowledge

Education

Bachelor's degree in CS or Information Security

5+ years of comparable work experience

Security certifications (CISSP, C|ASE, GPEN, OSCP)

Tools

Burp Suite

ZAP

SQLMap

Job description

About the Job

Reporting to the Director of Information Security, the Senior Application Security Specialist is responsible for assessing and securing web-based, in-house developed applications and open-source telephony solutions. This role offers the unique opportunity to collaborate with the security analyst team on new security initiatives and develop in-house tools to support threat monitoring, vulnerability management, and security control administration.

As Senior Application Security Specialist, You Will...

• Assess software and applications for security vulnerabilities through code reviews, automated scanning, fuzzing, and manual inspection.
• Work with the development team and participate in developer sprint planning to identify potential security impacts and mitigation strategies.
• Develop, implement, and manage tools and processes to aid in software security testing activities (SAST, DAST, IAST).
• Provide security reviews and approvals as part of ticketed code-release workflows.
• Implement and manage automated vulnerability scanning tools in the development CI/CD pipeline.
• Champion the development, implementation, and operationalization of a Security Software Development Lifecycle (SSDLC).
• Document and communicate found issues to the developer or infrastructure teams.
• Work with the security team to identify methods to bolster threat detection and prevention based on discovered issues.
• Liaison with contracted third parties to perform application security assessments.
• Attend client meetings and respond to client questionnaires to address inquiries related to secure development practices.

As a Senior Application Security Specialist, You Need...

• Bachelor's degree in Computer Science, Information Security, or equivalent; or 5 years of comparable work experience.
• Security Certifications such as CISSP, C|ASE, GPEN, or OSCP.
• Professional experience in conducting application security assessments and penetration testing.
• Experience in working with .NET (C#), Python, and ASP.
• Professional experience with penetration testing tools (e.g., Burp Suite, ZAP, SQLMap).
• Experience deploying tools that integrate with CI/CD pipelines to automate vulnerability testing.
• Familiarity with the application of agile coding practices, OWASP, and the OWASP Testing Project, or other similar frameworks.