Role : Application Security Engineer

Location : Hyderabad, Pune, Vizag

Experience : 5+ years

Shift Timing : 2nd Shift (2:00 PM to 11:00 PM)

Must Have Skills :

- Python Automation & API Integration

- Custom CodeQL Query Development

- GitHub Advanced Security (GHAS) Platform Engineering

- CI/CD Pipeline Architecture (GitHub Actions)

- SARIF Output Analysis & Interpretation

Key Responsibilities :

- Perform manual secure code reviews independent of automated tooling.

- Identify security flaws, insecure design patterns, abuse cases, and business logic weaknesses.

- Implement and scale enterprise application security tools, services, and controls.

- Demonstrate strong understanding of secure coding practices, threat modeling, and architectural risk assessment.

- Familiarity with OWASP, CIS, and NIST frameworks.

Qualifications :

- Bachelor's degree in Computer Science or related field.

- Knowledge of application-layer security controls (authentication, authorization, input/output validation).

- Ability to demonstrate knowledge of OWASP Top 10 and CWE Top 25.

- Web application penetration testing, ethical hacking, or red/blue teaming experience is a plus.

Preferred Skills :

- Enterprise Git Workflow, Multi-Repository Architecture, Enterprise Package Registry, Technical Documentation.