Application Security Engineer

5 - 7 Years
1 Opening
Trivandrum

Key Responsibilities:

Technical Execution

• Conduct security testing and validation across applications and infrastructure.
• Implement defensive security measures and countermeasures.
• Maintain and enhance CI/CD security strategies and practices.
• Act as a point of contact for security escalations and drive resolution.
• Deploy and manage security tools and services; guide developers on secure usage.
• Perform architecture reviews and recommend security improvements.
• Develop, test, and implement security plans and controls.
• Collaborate with senior leadership and stakeholders to solve complex problems.
• Apply best practices to emerging technologies including AI and agentic systems.

Team Support & Growth

• Continuously research new TTPs (Tactics, Techniques, Procedures) and assess risks.
• Integrate security standards into DevOps architecture.
• Share advanced skills and practices to promote team excellence.
• Explore and incorporate AI to enhance security capabilities.

Vulnerability Management

• Automate security integration within CI/CD pipelines.
• Promote “shift-left” security practices throughout the SDLC.
• Support technical teams in resolving code vulnerabilities.
• Communicate vulnerability risks effectively to technical and non-technical audiences.
• Utilize vulnerability databases to assess and remediate issues.

Communication & Leadership

• Deliver timely and accurate communications across teams and stakeholders.
• Mentor and influence peers within the security and technology functions.
• Lead projects as an individual contributor, providing assessments and adjustments.
• Escalate complex issues and collaborate on resolutions with management.

Education & Certifications:

Required:

• Bachelor’s degree or equivalent relevant experience.

Preferred:

• Certifications such as CISSP, GIAC, Security+, or other relevant credentials.

Experience:

Required:

• 3–7 years of experience in business and application security.

Preferred:

• Experience in one or more of the following areas:
  • Networking
  • Infrastructure configuration and resiliency
  • System architecture
  • Operating systems
  • Application development
  • Operational/IoT technology
  • Cloud operations

Skills & Competencies:

Required:

• Strong analytical, technical, and project/time management skills.
• Familiarity with security tools and operations.
• Knowledge of OWASP, CVSS/CWE, MITRE ATT&CK, Kill Chain, or similar frameworks.

Preferred:

• Understanding of IT environments and practices across various disciplines.

CI/CD securtiy integration,Infrastructuresecuritytesting&controls,Vulnerability Management