Senior Application Security Engineer

Overview

As a Senior Application Security Engineer, you will guide and support developer teams in delivering and deploying secure banking solutions, analysing software from a security perspective to identify and resolve security issues.

What you'll do

• Analyze software from a security perspective and identify and resolve security issues.
• Guide and support developer teams in delivering and deploying secure banking solutions.
• Provide guidance and workshops to developers and QA engineers on secure coding, security testing and working with security tools.
• Improve security in the SDLC with its tools and processes.
• Validate that application security requirements have been met.
• Perform security code reviews and suggest improvements to development teams.
• Work closely with customer-facing development teams and operations teams.
• Mentor new team members and act as the go-to person for security in your area.

What you'll need

• Good understanding of application security and common application security vulnerabilities.
• Good understanding of frontend, backend and mobile security domains, and expertise in one of them.
• Good understanding of DevOps and cloud native technologies.
• Successful track record in identifying, triaging and resolving application security issues.
• A background in development and a good understanding of the SDLC.
• English language at a professional level, written and spoken.

Nice to have

• Implementing OWASP ASVS/M-ASVS and SKF.
• Implementing SAST, SCA, IAST and RASP tools in the SDLC.
• Facilitating threat modeling sessions with development teams.
• Pen testing web and mobile applications.
• Training and guiding developers on application security concepts.
• Relevant regulations such as GDPR and PCI-DSS.

Details

• Location: Hyderabad.