Application Security Engineer

Location : Yerwada, Pune

Primary Responsibilities :

- Collaborate across cross-functional teams (business stakeholders, application BSAs, Information security and infrastructure teams) to proactively identify and reduce security vulnerabilities, with a target reduction of 50% across business applications.

- Conduct Tenable vulnerability scans to identify security gaps, generate detailed reports, and evaluate findings both before and after remediation activities.

- Execute security remediation initiatives by applying application and infrastructure patches, implementing configuration changes, and coordinating end-to-end testing with relevant stakeholders.

- Implement Remediations ensuring optimal system performance, reliability, accuracy, and security, without impacting business users.

- Root Cause Analysis to determine root cause of security vulnerabilities and implement corrective actions to remediate.

- Enforce and uphold IT security policies and standards, ensuring compliance and protection of applications, supporting infrastructure, and enterprise data assets.

Success Behaviors :

- Understand how to apply patches & configuration changes across technology portfolio to reduce potential vulnerabilities.

- Ensure remediations maintains high availability for all applications, reduce/eliminate system outages, optimize changes with least user impact outage windows.

- Understand enterprise scale, integrated applications from a process and business perspective.

- Understands and can articulate how solutions align to the internal needs.

- Receives positive Customer feedback from leadership, teams, and peers.

- Escalates appropriately for issues impacting stakeholders, project delivery or customer satisfaction, following internal process and policy.

Qualifications/Experience/Certifications :

- Minimum of 5 years of experience in application infrastructure, with strong technical expertise and hands-on experience in vulnerability remediation.

- Relevant certifications such as Tenable Certified (preferred), CISSP, CEH, or Security+.

- Proven ability to analyze security vulnerabilities, assess risk, and evaluate business and technical impact.

- Strong background in system architecture, including process workflows and operational support models.

- Experience supporting large-scale enterprise environments, including networks, storage, identity management, disaster recovery, and application security.

- Track record of defining and executing application upgrades, patching, and operational optimization initiatives.

- Strong collaboration skills with application, network, and security teams to troubleshoot issues and perform impact assessments.

- Hands-on experience designing, deploying, and managing enterprise application infrastructure across Linux, Windows, AIX, and AWS environments, ensuring high availability (24x7) and supporting on-call rotations.

- Excellent communication and interpersonal skills, with the ability to effectively collaborate in multicultural and globally distributed teams.

Preferred Technology Exposure :

- Security : Tenable

- Operating Systems : Linux, Windows, AIX

- Authentication applications : Okta SSO, LDAP, Active Directory.

- Application & Web Servers : JBoss EAP, Tomcat & Apache HTTP.

- SCM : GitHub

- CI - Jenkins, GitHub Actions

- Testing - SmartBear Test Complete, Ready API or similar