Application Security Engineer 2

Overview

Application Security Engineer 2 focused on application security and DevSecOps program execution, including assessments, roadmaps, and framework-aligned reporting.

What you'll do

• Develop AppSec program roadmaps.
• Conduct maturity assessments and capability evaluations.
• Produce framework-aligned reports and documentation for maturity models.
• Create executive summaries and strategic recommendations for leadership.
• Identify, track, and remediate vulnerabilities in third-party components and OSS.
• Apply secure software development practices across SDLC and CI/CD.

What you'll need

• 2-4 years of experience in application security, software assurance, or product security consulting.
• Strong knowledge of BSIMM, NIST SSDF, or OWASP SAMM frameworks.
• Experience in OSS security including vulnerability identification, tracking, and remediation.
• Familiarity with SBOM standards and tools such as SPDX and CycloneDX.
• Proven experience developing maturity models, capability assessments, or multi-year roadmaps for AppSec/DevSecOps.
• Hands-on experience with secure software development practices in SDLC, CI/CD pipelines, and code-level security controls.
• Excellent verbal and written communication skills for executive narratives and actionable plans.

Details

• Location: Bengaluru, Karnataka, India.