Sr Application Security Engineer

Caps Talent Technologies; Hyderabad; On-site; INR 3,500,000 - 6,000,000; Full time

Job summary

Caps Talent Technologies is seeking an experienced Information Security professional for 8+ years of hands-on experience in application security and secure software development. The role requires deep knowledge of SAST, SCA, DAST, API and SaaS security, with emphasis on threat modeling and secure DevOps practices.

The candidate will manage penetration testing, review code for vulnerabilities, and coordinate with IT, development, and security teams to reduce attack surfaces while responding to

Qualifications

• 8+ years in Information Security with focus on application security testing and vulnerability review.
• Experience with secure software development and threat modeling.
• Hands-on with SAST, SCA, DAST, API and SaaS security.
• Experience with pipeline integrations and cloud security.

Responsibilities

• Engineer tooling for security initiatives.
• Hands on with SAST, SCA, DAST; API and SaaS security.
• Review code for vulnerabilities and guide engineers to secure systems.
• Respond to security incidents and support DevOps security practices.
• Work with IT and development teams to reduce attack surfaces.

Skills

Security engineering

Threat modeling

DevSecOps

Incident response

Vulnerability assessment

Tools

SAST

SCA

DAST

Snyk

CI/CD pipelines

Job description

Essential Functions

• Engineer tooling for security initiatives
• Hands on experience with SAST, SCA, DAST
• Hands on experience and understanding of API Security, SaaS Security Experience with Threat Modeling
• Manage penetration testing, and potential red team engagements
• Review developed source code for vulnerabilities
• Provide guidance to Software and Systems Engineers to secure systems and code
• Analyze, test, debug and discover security flaws or vulnerabilities in software, networks, systems, and applications
• Assess systems to identify and mitigate risk and vulnerabilities
• Test existing and new technologies for security vulnerabilities
• Review requested changes for equipment, technology and software which are planned for deployment
• Work closely with development, operations, information security, and network teams to craft and enforce security policies as it relates to DevOps, Infrastructure, and Software
• Responds to security incidents
• Work with IT and Development to develop secure solutions to reduce attack surfaces
• Analyze and harden existing infrastructure, automation, and deployment processes
• Ensure security best practices are implemented and followed
• Participate in the regular on-call rotation and handle identified incidents during their shift

Qualifications:

One or more of the following certifications is strongly preferred:

• CISSP
• CCSK
• CEH
• Vendor Certifications (e.g. "AWS")
• GIAC/ GSEC

Requirements:

Total experience of 8+ years in Information Security with experience in the following:

• Application security testing and vulnerability review
• Secure software development
• SAST, SCA, DAST, API Security, SaaS Security
• Prior experience with Snyk is a strong plus
• Pipeline integrations
• Threat Modeling
• *nix
• Cloud security