Specialist, Application Security

Pearson; Bengaluru; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Pearson is seeking a Specialist, Application Security to embed security across the Software Development Lifecycle and enable development teams to build secure systems. You will conduct code reviews, SCA/DAST testing, and PKI/authn-authz design.

The role requires strong security knowledge and collaboration with engineering to implement secure-by-design solutions. Ideal candidates have extensive experience with security frameworks, cryptography, threat modeling, and cloud/container security in

Qualifications

• 6+ years of combined experience in software development, cybersecurity, and application security.
• Hands‑on experience with SAST, DAST, and SCA tools.
• Strong knowledge of secure SDLC practices and CI/CD security integration.
• Proficiency in Python, Java, or JavaScript.
• Understanding of AI technologies such as Generative AI and Agentic systems.
• Knowledge of security frameworks (OWASP Top 10, NIST, CIS).
• Strong grasp of cryptography, authentication, and authorization protocols.
• Experience in threat modeling (experience with commercial tools is a plus).
• Familiarity with cloud and container security (AWS, Azure, Kubernetes).
• Excellent communication and collaboration skills.

Responsibilities

• Perform secure code reviews, dependency analysis (SCA), and DAST across applications.
• Conduct manual security assessments and penetration testing to identify vulnerabilities.
• Integrate security into SDLC and CI/CD pipelines.
• Collaborate with engineering to design secure-by-design applications.
• Design and implement robust authentication and authorization mechanisms.
• Drive adoption of modern application security practices and frameworks.
• Stay updated on threats, vulnerabilities, and mitigations.
• Deliver secure coding training sessions for developers.
• Conduct risk assessments with actionable mitigation recommendations.

Skills

SAST/DAST/SCA tools

Programming languages

Secure SDLC

AI technologies (Generative AI)

Security frameworks (OWASP, NIST, CIS)

Cryptography and authn/authz

Threat modeling

Cloud & container security (AWS/Azure,

Education

Bachelor’s degree in CS/Cybersecurity or related field

Certifications (OSCP/OSWE, GWAPT/eWPT, CISSP, CSSLP, CEH)

Tools

SAST tools

DAST tools

SCA tools

Job description

Job Title: Specialist, Application Security

Job Description: We are seeking a highly skilled and motivated Application Security Engineer to join our growing security team. In this role, you will play a critical part in securing our applications by embedding security throughout the Software Development Lifecycle (SDLC), identifying vulnerabilities, and enabling development teams to build secure, resilient systems.

Key Responsibilities

• Perform secure code reviews, dependency analysis (SCA), and dynamic security testing (DAST) across a range of applications.
• Conduct manual security assessments and penetration testing to identify vulnerabilities.
• Integrate security best practices into SDLC and CI/CD pipelines.
• Collaborate closely with engineering teams to design and implement secure-by-design applications.
• Design and implement robust authentication and authorization mechanisms.
• Drive adoption of modern application security practices and frameworks.
• Stay up to date with the latest security threats, vulnerabilities, and mitigation techniques.
• Deliver secure coding training sessions and awareness programs for developers.
• Conduct risk assessments and provide actionable recommendations for mitigation.

Qualifications & Skills

• 6+ years of combined experience in software development, cybersecurity, and application security.
• Hands‑on experience with SAST, DAST, and SCA tools.
• Strong knowledge of secure SDLC practices and CI/CD security integration.
• Proficiency in Python, Java, or JavaScript.
• Understanding of AI technologies such as Generative AI and Agentic systems.
• Knowledge of security frameworks (OWASP Top 10, NIST, CIS).
• Strong grasp of cryptography, authentication, and authorization protocols.
• Experience in threat modeling (experience with commercial tools is a plus).
• Familiarity with cloud and container security (AWS, Azure, Kubernetes).
• Excellent communication and collaboration skills.

Preferred Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related field.
• Industry certifications such as OSCP / OSWE, GWAPT / eWPT, CISSP, CSSLP, or CEH (with application security focus).

Pearson is an Equal Opportunity Employer and a member of E-Verify. Employment decisions are based on qualifications, merit and business need. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, sexual orientation, gender identity, gender expression, age, national origin, protected veteran status, disability status or any other group protected by law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.

If you are an individual with a disability and are unable or limited in your ability to use or access our career site as a result of your disability, you may request reasonable accommodations by emailing [e-mail].