Senior Specialist - Application Security

Linde@India; Kolkata Metropolitan Area; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Loyalty offers

Annual leave

On-site eatery

Employee resource groups

Supportive teams

Job summary

Linde Global IT Delivery Center, Kolkata, is seeking a Senior Specialist in application security to lead end-to-end VAPT for Web, API, Android and iOS. You will plan, execute, and report findings, manage remediation, and ensure risk-based closure across design, development, deployment and production support.

You will apply OWASP, CWE, CVSS and NIST guidance and mentor engineers in secure testing methodologies while maintaining evidence, traceability and dashboards for management reporting.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering or equivalent.
• 5+ years hands-on application security, web/API/mobile VAPT and vulnerability management.
• Familiar with OWASP Top 10, CWE, CVSS, and threat modelling concepts.

Responsibilities

• Lead end-to-end VAPT for web apps, APIs, Android and iOS with manual and automated testing.
• Define assessment scope, test strategy, and rules of engagement; perform remediation guidance.
• Validate findings, ensure evidence quality, and produce reports with risk-based closure.

Skills

VAPT

Web security

API security

Mobile security

OWASP guidance

NIST guidance

Education

Bachelor’s degree – Computer Science / Information Security

Tools

Burp Suite Pro

Nessus

Kali Linux

OWASP ZAP

Job description

It's about Being What's next. What's in it for you?

The Senior Specialist in this position will enterprise application security SME – VAPT of Web, API, Android and iOS and manager end-to-end VAPT – planning, execution, reporting, remediation and retesting. Along with vulnerability management – triage, prioritisation, ownership and risk-based closure and security assurance across design, development, deployment and production support.

At Linde, employees can enjoy a range of benefits that make the workplace comfortable and enjoyable. These include loyalty offers, annual leave, an on-site eatery, employee resource groups, and teams that provide support and foster a sense of community. These benefits demonstrate Linde's commitment to creating a positive work experience for its employees.

Team

• The Senior Specialist in this position will lead end-to-end VAPT for web applications, APIs, Android and iOS using manual and automated techniques
• You will also define assessment scope, test strategy, attack scenarios and rules of engagement
• Apply OWASP, CWE, CVSS and relevant NIST guidance throughout assessments
• Validating exploitability, business impact and root cause; eliminate false positives
• You will also quality-assure findings for severity, evidence, reproducibility, remediation and reporting accuracy
• And manage UVM intake and triage – validation, deduplication, ownership, prioritisation and SLA tracking
• Also, assess patch and remediation options – applicability, dependencies, implementation risk and compensating controls
• Provide remediation guidance covering secure code, configuration, dependency upgrades, patching and architectural controls
• Along with performing retesting, residual-risk assessment, verified closure and exception/risk-acceptance support
• Also, maintain evidence, audit traceability, metrics, dashboards and management reporting
• Support threat modelling, security architecture, secure-design and pre-production reviews
• Review and correlate SAST, DAST, SCA and cloud/container security findings
• You will develop reusable testing methodologies, checklists, scripts and automation
• And mentor engineers; lead technical reviews, stakeholder discussions and complex security escalations

• Bachelor’s degree – Computer Science, Information Security, Engineering or equivalent
• Preferred certifications – OSCP, OSWE, OSEP, GWAPT, GMOB or equivalent hands‑on offensive-security credential
• 5+ years – hands‑on application security, web/API/mobile VAPT and vulnerability management
• Knowledge on OWASP WSTG, Top 10, API Security Top 10, MASVS/MASTG, CWE and CVSS and Burp Suite Professional, Acunetix, Kali Linux, Nmap, Metasploit and sqlmap is a must
• Also, Knowledge on HTTP/S, REST, SOAP, GraphQL, XML, JSON and web services

Why you will love working for us!

Linde is a leading global industrial gases and engineering company with 2025 sales of $34 billion. We live our mission of making our world more productive every day by providing high-quality solutions, technologies and services which are making our customers more successful and helping to sustain, decarbonize and protect our planet. Linde serves a variety of end markets such as chemicals & energy, food & beverage, electronics, healthcare, manufacturing, metals and mining. Linde’s industrial gases and technologies are used in countless applications, enabling space exploration and launch technologies, delivering ultra-high-purity and specialty gases for semiconductor manufacturing, providing life-saving medical oxygen and enabling clean hydrogen production and carbon capture to reduce greenhouse gas emissions. Linde also delivers state-of-the-art gas processing solutions to support customer growth, efficiency improvements and emissions reductions.

Linde Global Support Services Pvt. Ltd. (LGSS) is a wholly owned subsidiary of Linde, based out of Kolkata, India. It is a Global IT Delivery Center that has been successfully delivering IT Enabled Services to the group companies of Linde, across the world for almost two decades, since 2006. Our goal is to provide and support IT services and solutions that are critical for the operation of the entire group. As part of Linde's core Global IT Team, we cover a wide portfolio of IT services and solutions that ensure the continuous operation of Linde's business across multiple businesses across various geographies, time zones and cultures. The technical teams use their IT skills and experience to maintain and manage the IT applications and infrastructure of the organization.

At Linde Global IT Delivery Center, Kolkata we offer exciting career opportunities to grow and work in leading technologies in a truly global work environment.

Whatever you seek to accomplish, and wherever you want those accomplishments to take you, a career at Linde provides limitless ways to achieve your potential, while making a positive impact in the world. Be Linde. Be Limitless.

For more information about the company and its products and services, please visit linde.com

Any designations used of course apply to persons of all genders. The form of speech used here is for simplicity only.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, pregnancy, sexual orientation, gender identity or expression, or any other reason prohibited by applicable law.

Linde Global Support Services Pvt. Ltd acts responsibly towards its shareholders, business partners, employees, society and the environment in every one of its business areas, regions and locations across the globe. The company is committed to technologies and products that unite the goals of customer value and sustainable development.