Senior Application Security Engineer
New
J
JobgetherCybersecurity
Based in IndiaFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- At least 6 years of experience in Application Security, Product Security, or Secure Software Development
- Required Skills
- AWSGCPAzure
Requirements
- At least 6 years of experience in Application Security, Product Security, or Secure Software Development.
- Demonstrated experience building security capabilities, rather than only operating existing tools.
- Experience designing security controls for CI/CD pipelines and source code repositories, including GitHub, GitLab, Jenkins, or comparable platforms.
- Hands-on experience implementing and tuning SAST, DAST, SCA, and container scanning solutions.
- Experience implementing WAF and API protection capabilities and driving vulnerability remediation to completion.
- Knowledge of SLSA and NIST SSDF principles, including build integrity, secrets management, and artifact signing.
- Experience designing security controls in AWS, Azure, or GCP environments.
- Strong understanding of OWASP Top 10 for web applications and APIs, CWE classifications, and secure coding practices.
- Working knowledge of the OWASP Top 10 for LLM Applications and MITRE ATLAS.
- Ability to write production-quality automation and tooling in at least one programming language, such as Python, Java, Go, or JavaScript/Node.js.
- Preferred: Experience building LLM-powered developer or security tools, including prompt and skill design, tool and MCP integrations, and output evaluation.
- Preferred: Experience with software signing and provenance tools such as Sigstore or Cosign, SBOM and software composition analysis in CI/CD, and GitOps or infrastructure-as-code scanning.
Responsibilities
- Build and scale secure software development lifecycle practices, including secure coding standards, reference architectures, and developer-friendly security guardrails.
- Develop vulnerability prioritization capabilities across code, pipelines, and deployed services, and drive remediation through measurable outcomes.
- Establish threat modeling practices for applications, APIs, delivery pipelines, RAG architectures, and autonomous AI agents.
- Architect security controls for CI/CD platforms, including GitHub Actions, Jenkins, GitLab, and Azure DevOps.
- Design and optimize automated SAST, DAST, SCA, and container scanning workflows.
- Automate API discovery, dependency scanning, SBOM generation, secrets detection, and other software supply chain security capabilities.
- Build AI-powered security tools and agent workflows to review pull requests, identify insecure patterns, generate security tests, triage findings, and propose remediations for human review.
- Define security guardrails for AI agents, including least-privilege access, human approval, output evaluation, and audit logging.
- Advise product, platform, and DevOps leaders, validate security tools, and demonstrate impact through metrics.
- Mentor engineering teams in secure coding and pipeline practices, and help develop a Security Champions program.
View Full Description & ApplyYou'll be redirected to the employer's site
