Senior Engineer, Application Security

DHR Holding India; Pune District; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Danaher is seeking a Senior Engineer, Application Security to embed security into the SDLC and product engineering. You will drive secure design reviews, threat modeling, testing, and developer enablement across multiple product teams.

The role requires hands-on experience with SAST/DAST/SCA, IaC scanning, and secure-coding practices, with opportunities to build scalable automation and SBOM workflows. Location is Pune/Bangalore on-site.

Qualifications

• 5+ years of experience in application/security or security-focused software engineering.
• Hands-on experience with SAST/DAST/SCA and IaC scanning; secure design reviews, code reviews or threat modeling.

Responsibilities

• Embed security into SDLC and product engineering; perform threat modeling and secure design reviews.
• Conduct security testing (SAST/DAST/SCA) and automate testing in CI/CD.
• Triage vulnerabilities with product teams and drive remediation.
• Develop guardrails and secure-by-design patterns; enable developers with secure-coding practices.

Skills

SAST

DAST

SCA

secret scanning

threat modeling

CI/CD integration

secure coding practices

Education

Bachelor's degree in Cybersecurity, Computer Science, Software Engineering, or related field

Tools

Snyk

Veracode

Checkmarx

Semgrep

GitHub Advanced Security

Job description

Job Summary

At Danaher, the Senior Engineer, Application Security embeds security into the SDLC and product engineering. Enterprise AppSec strategy and standards are set by leadership/architecture; the engineer executes within that design - secure design reviews, threat modeling, testing, and developer enablement. The engineer works independently on complex problems across product teams that each own their codebases.

Location: Pune/Bangalore onsite.

Responsibilities

• Engineer AppSec testing: SAST/DAST/SCA/secret scanning, IaC scanning, API and mobile security, and container/cloud-native app security in CI/CD.
• Contribute to secure-by-design patterns and guardrails defined by senior architecture.
• Build automation and pipeline integrations to scale testing coverage.
• Support the sustainability model: secure-coding standards and SBOM/OSS-risk workflows.
• Perform secure design reviews and threat modeling with product teams.
• Triage and prioritize application vulnerabilities; partner on remediation.
• Tune and operate SAST/DAST/SCA tooling; reduce false positives.
• Enable developers with secure-coding patterns and guardrail adoption.
• Assess OSS/supply-chain risk; support SBOM and release checks.

Essential requirements

• Bachelors degree in Cybersecurity, Computer Science, Software Engineering, or related field.
• 5+ years of experience in application/product security or security-focused software engineering (GCRF P3 Bachelors-track minimum; recommended, pending Comp sign-off).
• Hands-on experience with application security testing: SAST, DAST, SCA, IaC scanning, secret scanning, plus secure design review, code review, or threat modeling.
• Experience with application security tooling (such as Snyk, Veracode, Checkmarx, Semgrep, or GitHub Advanced Security) integrated into CI/CD pipelines.
• Experience working independently with product engineering teams to remediate vulnerabilities and apply secure-coding practices.

Preferred qualifications

• Experience with API security, cloud-native/Kubernetes security, or software supply chain/SBOM.
• GWAPT, GWEB, CSSLP, or a cloud security certification.
• Exposure to AI/LLM application security.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.