Application Security Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Application Security Engineer based in India.

This role offers the opportunity to strengthen the security foundation of modern web and API-based applications within a technology-driven environment.

You will play a key role in embedding security practices throughout the software development lifecycle and improving application resilience.

Working closely with engineering teams, you will identify vulnerabilities, optimize security tooling, and support timely remediation efforts.

The position combines hands-on application security expertise with collaboration across development and operations teams.

You will contribute to secure architecture decisions, vulnerability management, and offensive security initiatives.

This is an ideal opportunity for a security professional who enjoys solving complex challenges and helping organizations build safer digital solutions.

Accountabilities

As an Application Security Engineer, you will be responsible for improving application security practices, managing security tools, and helping engineering teams proactively identify and address risks. You will support secure software development processes while driving continuous improvements in vulnerability management and security operations.

• Provide application security engineering support for web and API-based applications.
• Integrate security controls into the Secure Software Development Lifecycle (SDLC), including threat modeling and security design reviews.
• Administer and optimize vulnerability scanning tools by configuring policies, schedules, and detection settings.
• Implement and maintain SAST and DAST solutions within CI/CD pipelines to improve security testing coverage.
• Collaborate with engineering teams to interpret security findings and drive effective remediation.
• Identify, validate, and prioritize vulnerabilities based on technical severity and business impact.
• Perform manual security testing, offensive security techniques, and proof-of-concept exploit validation when required.
• Conduct security assessments across applications and APIs, reproducing reported issues and verifying remediation effectiveness.
• Document attack paths, vulnerabilities, remediation steps, and security recommendations clearly.

Interested in remote work opportunities in Cyber Security? Discover Cyber Security Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.

• Promote secure coding practices and strengthen overall application security maturity.
  
  

Requirements

The ideal candidate has strong application security experience, hands-on knowledge of modern security tools, and the ability to collaborate effectively with development teams. You should have experience securing web applications, APIs, and software delivery environments.

• Bachelor’s degree in Computer Science, Information Security, or a related technical field.
• 3-6 years of experience in Application Security or a related cybersecurity discipline.
• Hands-on experience with SAST, DAST, vulnerability scanning, and security testing tools.
• Strong understanding of OWASP Top 10, web application security, and API security principles.
• Experience integrating security practices into CI/CD pipelines such as Jenkins, GitHub Actions, or GitLab.
• Knowledge of secure coding practices and common vulnerability patterns.
• Experience with vulnerability discovery, risk analysis, and remediation processes.
• Familiarity with scripting languages such as Python or Bash is a plus.
• Experience with threat modeling and secure design reviews is preferred.
• Exposure to red teaming, penetration testing techniques, or offensive security practices is a plus.
• Relevant certifications such as OSCP, CEH, or GWAPT are advantageous.
• Strong analytical, problem-solving, communication, and collaboration skills.
  
  

Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.

Benefits

• Fully remote work opportunity based in India.
• Opportunity to contribute to impactful digital transformation and security initiatives.
• Exposure to modern application security practices, tools, and technologies.
• Collaborative environment working with engineering and technology teams.
• Opportunity to strengthen expertise in secure software development and vulnerability management.
• Professional growth opportunities through challenging security projects.
• Competitive compensation package based on skills, experience, education, certifications, and business needs.
• Inclusive workplace culture focused on equal opportunity, development, and career growth.
  
  

How Jobgether Works

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.