Application Security Specialist - SAST/DAST

Description :

SG IT is looking for an experienced Application Security Specialist with expertise in securing enterprise applications within Banking, Financial Services, or FinTech environments. We are seeking professionals who can proactively identify vulnerabilities, strengthen application security posture, and support secure software delivery across enterprise platforms.

Key Responsibilities :

- Identify, analyze, and remediate security vulnerabilities across web, mobile, and enterprise applications

- Conduct SAST, DAST, penetration testing coordination, and security validation activities

- Collaborate with development, DevOps, infrastructure, and architecture teams to embed security into SDLC

- Define and implement secure coding standards and security best practices

- Support threat modeling, risk assessments, and security governance initiatives

- Monitor and respond to application security incidents and findings

- Ensure compliance with security frameworks, regulatory requirements, and industry standards

- Work closely with stakeholders to improve overall enterprise security posture

Required Skills & Experience :

- Strong experience in Banking, Financial Services, FinTech, or Insurance domain

- Hands-on experience with SAST, DAST, API Security, and Vulnerability Management tools

- Strong understanding of OWASP Top 10, secure coding practices, and common attack vectors

- Experience with application penetration testing and remediation support

- Knowledge of authentication, authorization, encryption, and identity security concepts

- Familiarity with DevSecOps and CI/CD security integration

- Experience working in Agile and enterprise delivery environments

- Excellent stakeholder communication and problem-solving skills

Preferred Qualifications :

- Experience with cloud security (AWS/Azure/GCP)

- Exposure to container security and Kubernetes security practices

- Understanding of regulatory standards such as PCI-DSS, ISO 27001, SOC2, etc.

- Experience working with global enterprise security teams