Senior Application Security Engineer
J
JobgetherApplication security
Remote working opportunity based in India.Full-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 6+ years of experience in software engineering or security, including at least 3 years focused on application or product security
- Required Skills
- JavaOAuthC#.NET
Requirements
- Have 6+ years of experience in software engineering or security, including at least 3 years focused on application or product security; equivalent professional depth may be considered.
- Bring application security experience with products that customers deploy and operate in their own environments.
- Have production-level programming skills in C# and .NET and sufficient Java experience to review and contribute to Java applications.
- Have recent hands-on experience with AI-assisted development or AI-enabled security tooling, ideally within the last six months.
- Understand threat modeling and collaborate with engineering teams during the design stage.
- Have experience with static analysis, dynamic application testing, software composition analysis, dependency scanning, and security tooling optimization.
- Know identity and authentication technologies and protocols such as OAuth, OIDC, SAML, and SCIM.
- Have experience with coordinated vulnerability disclosure, vulnerability triage, CVE processes, and customer-facing security advisories.
- Be able to conduct secure code reviews across web applications and APIs.
- Understand software supply-chain security, SBOM standards, dependency management, and license compliance.
- Communicate security risks clearly to technical and non-technical stakeholders and prioritize risks by business and technical impact.
Responsibilities
- Lead threat modeling for critical application areas, including authentication, session management, privilege escalation, integrations, tenant isolation, cryptography, and secrets management.
- Define security requirements early in architecture and development, and advise product and engineering leaders on risks and release decisions.
- Review and implement security fixes, dependency updates, and code-level remediation in product repositories.
- Own and improve static application security testing, dynamic testing, dependency scanning, and related security tooling.
- Promote secure coding across C#/.NET and Java codebases through reusable patterns, libraries, reference implementations, and code reviews.
- Establish security review practices for AI-assisted software development, including assessment of AI-generated code and automated remediation workflows.
- Lead product vulnerability response from intake and triage through remediation, coordinated disclosure, CVE management, and customer-facing advisories.
- Analyze penetration-testing and bug-bounty findings and implement controls to prevent recurring weaknesses.
- Own software composition analysis and SBOM generation, including software provenance and licensing information.
- Maintain security evidence for customer questionnaires, security reviews, certifications, and other assurance activities.
View Full Description & ApplyYou'll be redirected to the employer's site
