Key Responsibilities :

- Design and implement application security controls across the software development lifecycle.

- Conduct security reviews and promote secure coding and secure design principles.

- Identify and remediate application vulnerabilities based on OWASP Top 10 and industry security standards.

- Integrate application security tools such as Snyk, Checkmarx, Fortify, and SonarQube into development workflows.

- Implement and manage Identity and Access Management (IAM) solutions.

- Work with OAuth 2.0 and OpenID Connect for authentication and authorization.

- Implement encryption and security controls for applications and data.

- Collaborate with network and infrastructure teams on firewalls, HTTPS, TLS, and network security.

- Secure applications and workloads across AWS, Azure, or GCP environments.

- Integrate security checks into CI/CD and DevSecOps pipelines.

- Support container security initiatives involving Docker and Kubernetes.

- Identify security risks, conduct root-cause analysis, and recommend remediation strategies.

- Work with development, DevOps, infrastructure, and business stakeholders to strengthen the organization's security posture.

- Contribute to Zero Trust and modern application security initiatives.

Mandatory Skills :

- Application Security, Secure Coding & Secure Design, OWASP Top 10

- IAM (4+ years), Cloud Platforms (3+ years)

- OAuth 2.0, OpenID Connect, Encryption Techniques

- Snyk / Checkmarx / Fortify / SonarQube

- DevSecOps & CI/CD Security, Network Security, HTTPS / TLS

- AWS / Azure / GCP Security

Preferred Skills :

- Container Security (Docker, Kubernetes), Zero Trust Architecture, Modern Security Frameworks

- Security certifications such as CISSP, CEH, or CSSLP

Preferred Candidate Profile :

- Strong hands-on experience in application and cloud security.

- Proven experience implementing IAM and authentication solutions.

- Strong understanding of security vulnerabilities and remediation techniques.

- Excellent analytical and problem-solving skills.

- Strong communication and stakeholder-management capabilities.

- Ability to collaborate effectively with engineering, DevOps, cloud, and security teams