275 Application Security jobs in India
Application Security
Posted today
Job Viewed
Job Description
Job Summary:
We are looking for a DevSecOps Engineer to embed security into our software development lifecycle and cloud infrastructure. The ideal candidate will have a strong background in DevOps practices, cloud-native security, and automation, with a focus on integrating security controls into CI/CD pipelines and infrastructure as code.
Key Responsibilities:
- Integrate security tools and practices into CI/CD pipelines to ensure secure code delivery.
- Automate security testing (SAST, DAST, SCA) and vulnerability scanning across development workflows.
- Implement and manage secrets management, identity and access controls, and secure configurations.
- Collaborate with development, operations, and security teams to enforce secure coding and deployment standards.
- Monitor and respond to security events in cloud and container environments.
- Develop and maintain Infrastructure as Code (IaC) security policies using tools like Terraform, CloudFormation, or Pulumi.
- Conduct threat modeling and risk assessments for cloud-native applications and services.
Required Skills & Experience:
- Hands-on experience with CI/CD tools (Jenkins, GitLab CI, GitHub Actions, Azure DevOps).
- Proficiency in security tools: SonarQube, Checkmarx, Snyk, Aqua, Prisma Cloud, HashiCorp Vault.
- Strong understanding of cloud platforms (AWS, Azure, GCP) and their security services.
- Experience with container security and orchestration (Docker, Kubernetes).
- Familiarity with IaC tools and security scanning (Terraform, CloudFormation, tfsec, Checkov).
- Scripting and automation skills (Python, Bash, Go).
- Knowledge of compliance standards (OWASP, NIST, CIS Benchmarks, ISO
Preferred Certifications:
- Certified DevSecOps Professional (CDP)
- AWS/Azure/GCP Security Specialty
- Certified Kubernetes Security Specialist (CKS)
- GIAC Cloud Security Automation (GCSA)
- CISSP or CCSP (for senior roles)
Soft Skills:
- Strong problem-solving and analytical mindset.
- Excellent communication and collaboration skills.
- Ability to work in agile, cross-functional teams.
Application Security
Posted today
Job Viewed
Job Description
· Serve as a trusted advisor to our enterprise customers, leading the analysis and remediation efforts of complex vulnerabilities using the full Checkmarx platform.
· Lead security reviews and consultation efforts across various SDLC stages, focusing on holistic application security.
· Guide customers in adopting secure coding practices, threat modeling, and AppSec risk management strategies.
· Research and develop proof-of-concept (PoC) exploits to demonstrate real-world risks.
Key Responsibilities
· Perform advanced static and dynamic application security testing (SAST, DAST) across a wide range of programming languages and frameworks.
· Lead in-depth software composition analysis (SCA) to identify vulnerable open-source components and license risks.
· Support and guide customers in implementing Infrastructure as Code (IaC) and API security testing strategies.
· Provide strategic mitigation advice to development and AppSec teams based on detailed vulnerability assessments.
· Deliver technical workshops and training sessions to raise customer maturity in AppSec and secure development.
· Create and present tailored PoCs to showcase the exploitability of identified findings.
· Serve as a technical mentor to junior team members and assist with complex analysis escalations.
Stay updated for more insights and innovations by following us on LinkedIn:
eSec Forte Technologies
Application Security
Posted today
Job Viewed
Job Description
Requirements:
- 2-4 years of experience in SAST Tools, Checkmarx, or Web. Mobile and API.
- Skilled at secure code review and have in-depth knowledge of application security.
- Candidates who can join immediately will be given preference.
Open Positions:
Application Security - 06
SAST ( Checkmarx) - 16
Follow the
eSec Forte Technologies
Page to stay updated on future opportunities and events
Application Security
Posted today
Job Viewed
Job Description
Date: Sep 22, 2025
Job Requisition Id: 62740
Location:
Hyderabad, IN
IBG
JD :
- Understands critical access restrictions and audit compliance requirement for tables and reports
- Understand authorization business requirements for different SAP modules (FI/HR/MM/PM)
- Experience In supporting MDG systems
- Requires in-depth knowledge of SAP Security concepts and administration
Responsibilities would include design of SAP security strategy according to customer requirements and SAP best practices.
Duties include the creation of roles, profiles, user ID's and custom authorization objects
- Transports
- Creates training materials and may assist with user orientation and training
IBG
Application Security
Posted today
Job Viewed
Job Description
Organisation Unit Purpose (why does the unit exist? What are the results the unit is expected to deliver?)
- The unit's primary purpose is to Design, Engineer & eventually Embed practical & balanced cyber / information security principles/patterns/controls into all products and platforms. Conduct security assessments, gap analysis, provide remediation to the relevant squads / stakeholders.
Job Purpose (Why does the job exist? What is the unique contribution made by the job holder?)
Primary/General Job Purpose:
- Encourage 'Shift Left' Mindset - Proactively embed security requirements, by influencing implementation of security & privacy patterns from the start of the development cycle
- Implement via Influence - Influence stakeholders such as Product Owners, Solution Architects, Developers, Testers, Engineers & others to include security patterns into features, epics and stories in order to build secure, innovative & superior digital products for customers and employees
- Assessments – Perform security assessment and perform gap analysis to provide appropriate remediations to the teams for implementing the fixes.
- Key Skills – Web Application Security, Security Code review, API security, Underlying infrastructure security, Integration Security, Database Security, Secure Configuration Review.
- Tools and Technologies – Burp Suite, Postman, Tenable Nessus, Checkmarx SAST, GitHub and good knowledge about monolithic and microservice architecture and pipeline driven security.
Experience with following Components:
Technical Requirements
Application Security - Assessment Skillset
1. Web Application Security – Owasp top 10 , CVSS etc
2. Security Code Review – manual code review in Git etc
3. API Security Review – Open shift, container review etc.
4. Database Security – Requirements to enhance security on Database
5. Web Server Security – Requirements to enhance security on the web server
6. Configuration Review – has performed different configuration reviews and should have found good misconfigurations in the system.
7. Integration review – How the application connects with different systems, performed security review on those integrations.
8. Transport Layer Security – How communication channels are secured and understanding of the Transport layer security mechanisms and controls.
Soft Skills:
- Ability to collaborate with multiple stakeholders and manage their expectations from a security perspective
- Holistic thinking; must balance security and functionality using practical demonstrable examples. Must also contribute to and implement "good architecture principles" to lower technical debt
- Assertive personality; should be able to hold her/his own in a project board or work group setting
- Superlative written and verbal communication skills; should be able to explain technical observations in an easy-to-understand manner
- Ability to work under pressure and meet tough/challenging deadlines
- Influencer- must be able to convince various stakeholders (internal IT Teams, C-Level execs,
- Risk & Audit) of why a certain observation is a concern or not
- Strong understanding of Risk Management Framework and security controls implementation from an implementer standpoint
- Has strong decision making, planning and time management skills.
- Can work independently.
- Has a positive and constructive attitude.
Education
Bachelor's degree in a computer-related field such as computer science, cyber/information security discipline, physics, mathematics or similar (Essential)
- General Information Security: OSCP, CEH, CISM/CISA or similar
- General Cloud Security: CCSK /CCSP or similar
- Specific Cloud Security: Azure Security or similar
- Network Security: CCNA, CCNP, CCIE, Certified Kubernetes Security Specialist
Experience (Essential)
- Must have minimum 3 years of experience in an information security function with good background in information technology, stakeholder management and people management
Knowledge & Skills - Technical, Functional & Managerial
- Expert at the Web Application Security testing, in depth testing skillset and ability to bypass weak implementation for attacks, ability to bypass WAF for attack scenarios such as XSS, SQL Injection etc. (Essential)
- Good understanding of Microservice based architecture (Technical) (Essential)
- Good hands-on experience solutioning technology architectures that involve perimeter protection, core protection and end-point protection/detection & API /Micro services Security (Essential)
- Experience working in a DevOps environment with knowledge of Continuous Integration, Containers, DAST/SAST tools and building Evil Stories (Technical) (Essential)
- The Analyst / Engineer should be able to understand how different systems work and what security controls are implemented in such integrations. (Essential)
- The Analyst / Engineer should be capable in understanding the hardening standards, creating one if not available, and perform the testing against the hardening standards. (Essential)
- The Analyst / Engineer should be capable of assessing security flaws in underlying infrastructure and the connected components. (Essential)
- The Analyst / Engineer should be capable of assessing the security flaws in the Transport Layer. (Essential)
- The Analyst / Engineer has the skill to follow design principles and applies design patterns to enforce maintainable and reusable patterns, in the form of code or otherwise.
- The Analyst / Engineer can understand and interpret potential issues found in source or compiled code
- The Analyst / Engineer has automation skills/capability in the form of scripting or similar
- The Analyst / Engineer can attack application and infrastructure assets, interpret threats, and suggest mitigating measures
- Ability to interpret Security Requirements mandated by oversight functions and ensure comprehensive coverage of those requirements, via documentation, within high level design and/or during agile ceremonies, via Evil Stories Desirable
- The Analyst / Engineer can propose options for solutions to the security requirements / patterns that provide a balance of security, user experience & performance Desirable
- The Analyst / Engineer has the skill to discuss and present solutions to other architecture, security, development, and leadership teams. Desirable
- The Analyst / Engineer can interpret and understand vulnerability assessment reports and calculate inherent and/or residual risks based on the assessment of such reports
- Ability to articulate and be a persuasive leader who can serve as an effective member of the senior management team.
- Good negotiation skills will be desirable Desirable
- Must have good judgment skills to decide on an exception approval
- Ability to enforce improvements when necessary, using Influence rather than Policing measures Superior written and verbal communication skills to effectively communicate security threats and recommendations to technical or non-technical stakeholders
- Knowledge of application of Agile methodologies/principles such as Scrum or Kanban
Behavioral Competencies - Thinking Related, People Related & Self Related (All Essential)
- Influencer/Security Evangelist for the Team/Squad
- Positive & Constructive Attitude
- Autonomous worker / Decision Maker
- Good listener
- Patient & Calm during stressful situations
- High energy individual / Motivator
- Win-Win Attitude
- Hacker/Defense-In-Depth mindset
- Analytical thinking
- Team Player/Interpersonal Skills
- Eye for detail
- Persistent & Persuasive
- Organized / Structured
- Deadline oriented
- Competent and committed
- People's Person; understands stakeholder management
- Empathetic
- Passionate about architecting smart solutions
- Innovator/Out of the box thinker
- Collaborative Leadership style
- Confident Presenter All Essential
Other Information
- Age – No bar
- Nationality – No bar
- Gender – No bar
Application Security
Posted today
Job Viewed
Job Description
Organisation Unit Purpose (why does the unit exist? What are the results the unit is expected to deliver?)
- The unit's primary purpose is to Design, Engineer & eventually Embed practical & balanced cyber / information security principles/patterns/controls into all products and platforms. Conduct security assessments, gap analysis, provide remediation to the relevant squads / stakeholders.
Job Purpose (Why does the job exist? What is the unique contribution made by the job holder?)
Primary/General Job Purpose:
- Encourage 'Shift Left' Mindset - Proactively embed security requirements, by influencing implementation of security & privacy patterns from the start of the development cycle
- Implement via Influence - Influence stakeholders such as Product Owners, Solution Architects, Developers, Testers, Engineers & others to include security patterns into features, epics and stories in order to build secure, innovative & superior digital products for customers and employees
- Assessments – Perform security assessment and perform gap analysis to provide appropriate remediations to the teams for implementing the fixes.
- Key Skills – Web Application Security, Security Code review, API security, Underlying infrastructure security, Integration Security, Database Security, Secure Configuration Review.
- Tools and Technologies – Burp Suite, Postman, Tenable Nessus, Checkmarx SAST, GitHub and good knowledge about monolithic and microservice architecture and pipeline driven security.
Experience with following Components:
Technical Requirements
Application Security - Assessment Skillset
1. Web Application Security – Owasp top 10 , CVSS etc
2. Security Code Review – manual code review in Git etc
3. API Security Review – Open shift, container review etc.
4. Database Security – Requirements to enhance security on Database
5. Web Server Security – Requirements to enhance security on the web server
6. Configuration Review – has performed different configuration reviews and should have found good misconfigurations in the system.
7. Integration review – How the application connects with different systems, performed security review on those integrations.
8. Transport Layer Security – How communication channels are secured and understanding of the Transport layer security mechanisms and controls.
Soft Skills:
- Ability to collaborate with multiple stakeholders and manage their expectations from a security perspective
- Holistic thinking; must balance security and functionality using practical demonstrable examples. Must also contribute to and implement "good architecture principles" to lower technical debt
- Assertive personality; should be able to hold her/his own in a project board or work group setting
- Superlative written and verbal communication skills; should be able to explain technical observations in an easy-to-understand manner
- Ability to work under pressure and meet tough/challenging deadlines
- Influencer- must be able to convince various stakeholders (internal IT Teams, C-Level execs,
- Risk & Audit) of why a certain observation is a concern or not
- Strong understanding of Risk Management Framework and security controls implementation from an implementer standpoint
- Has strong decision making, planning and time management skills.
- Can work independently.
- Has a positive and constructive attitude.
Education
Bachelor's degree in a computer-related field such as computer science, cyber/information security discipline, physics, mathematics or similar (Essential)
- General Information Security: OSCP, CEH, CISM/CISA or similar
- General Cloud Security: CCSK /CCSP or similar
- Specific Cloud Security: Azure Security or similar
- Network Security: CCNA, CCNP, CCIE, Certified Kubernetes Security Specialist
Experience (Essential)
- Must have minimum 3 years of experience in an information security function with good background in information technology, stakeholder management and people management
Knowledge & Skills - Technical, Functional & Managerial
- Expert at the Web Application Security testing, in depth testing skillset and ability to bypass weak implementation for attacks, ability to bypass WAF for attack scenarios such as XSS, SQL Injection etc. (Essential)
- Good understanding of Microservice based architecture (Technical) (Essential)
- Good hands-on experience solutioning technology architectures that involve perimeter protection, core protection and end-point protection/detection & API /Micro services Security (Essential)
- Experience working in a DevOps environment with knowledge of Continuous Integration, Containers, DAST/SAST tools and building Evil Stories (Technical) (Essential)
- The Analyst / Engineer should be able to understand how different systems work and what security controls are implemented in such integrations. (Essential)
- The Analyst / Engineer should be capable in understanding the hardening standards, creating one if not available, and perform the testing against the hardening standards. (Essential)
- The Analyst / Engineer should be capable of assessing security flaws in underlying infrastructure and the connected components. (Essential)
- The Analyst / Engineer should be capable of assessing the security flaws in the Transport Layer. (Essential)
- The Analyst / Engineer has the skill to follow design principles and applies design patterns to enforce maintainable and reusable patterns, in the form of code or otherwise.
- The Analyst / Engineer can understand and interpret potential issues found in source or compiled code
- The Analyst / Engineer has automation skills/capability in the form of scripting or similar
- The Analyst / Engineer can attack application and infrastructure assets, interpret threats, and suggest mitigating measures
- Ability to interpret Security Requirements mandated by oversight functions and ensure comprehensive coverage of those requirements, via documentation, within high level design and/or during agile ceremonies, via Evil Stories Desirable
- The Analyst / Engineer can propose options for solutions to the security requirements / patterns that provide a balance of security, user experience & performance Desirable
- The Analyst / Engineer has the skill to discuss and present solutions to other architecture, security, development, and leadership teams. Desirable
- The Analyst / Engineer can interpret and understand vulnerability assessment reports and calculate inherent and/or residual risks based on the assessment of such reports
- Ability to articulate and be a persuasive leader who can serve as an effective member of the senior management team.
- Good negotiation skills will be desirable Desirable
- Must have good judgment skills to decide on an exception approval
- Ability to enforce improvements when necessary, using Influence rather than Policing measures Superior written and verbal communication skills to effectively communicate security threats and recommendations to technical or non-technical stakeholders
- Knowledge of application of Agile methodologies/principles such as Scrum or Kanban
Behavioral Competencies - Thinking Related, People Related & Self Related (All Essential)
- Influencer/Security Evangelist for the Team/Squad
- Positive & Constructive Attitude
- Autonomous worker / Decision Maker
- Good listener
- Patient & Calm during stressful situations
- High energy individual / Motivator
- Win-Win Attitude
- Hacker/Defense-In-Depth mindset
- Analytical thinking
- Team Player/Interpersonal Skills
- Eye for detail
- Persistent & Persuasive
- Organized / Structured
- Deadline oriented
- Competent and committed
- People's Person; understands stakeholder management
- Empathetic
- Passionate about architecting smart solutions
- Innovator/Out of the box thinker
- Collaborative Leadership style
- Confident Presenter All Essential
Other Information
- Age – No bar
- Nationality – No bar
- Gender – No bar
Application Security
Posted today
Job Viewed
Job Description
**Job Description:
- We are looking for an experienced security professional who can help us develop security assessment and evaluation plans for existing or new solutions within Colt and to lead and deliver cyber risk assessments.
- Based on security best practices, this individual will be expected to provide guidance and hands-on experience to teams in design, development, and maintenance of security solutions.
- In addition to the above, the new joiner will ideally have a background in Application Security specifically, with an understanding on how to deliver and implement SAST/DAST solutions and general experience in the DevSecOps area.
**Experience(in Years) **:3 to 8 years
Be The First To Know
About the latest Application security Jobs in India !
Application Security Engineer
Posted 5 days ago
Job Viewed
Job Description
+ Analysis of UML diagrams and DFDs/Threat Models for security flaws and detailing specific recommendations in software and system setup to address them
+ Mentoring of developers on security topics and coding
+ Develop and deliver trainings to developers and management on security topics
+ Analyzing requirements and performing code review for security flaws
+ Establish direction for security requirements in our custom hardware and software
+ Collaborate with other internal security groups across multiple divisions, at different levels, and in multiple international locations, as well as 3rd parties
+ Continuous improvement of security processes via observation and measurement of project performance, and making updates to improve accuracy, reduce overhead, while maintaining compliance with IEC 62443 3-3 and 4-1 standards
+ Participate in audits for standards compliance
Who You Are:
You quickly and decisively act in constantly evolving, unexpected situations. You adjust communication content and style to meet the needs of diverse partners. You always keep the end in sight; puts in extra effort to meet deadlines. You analyze multiple and diverse sources of information to define problems accurately before moving to solutions. You observe situational and group dynamics and select best-fit approach.
For This Role, You Will Need:
+ Bachelor's degree in Computer Science, Computer Engineering, or a related engineering field with a minimum of 8 years of relevant experience OR Master's degree in Computer Science, Computer Engineering, or a related engineering field with a minimum of 7 years of relevant experience
+ Candidate must have hands-on, professional coding experience, C/C++ or C# preferred
+ Understanding of SDL/secure software development lifecycle practices
+ Practical experience in software and security design principles
+ Experience performing application-level threat modeling and code review
+ Excellent interpersonal skills
+ Excellent written and verbal communication skills
+ Ability to clearly communicate technical information to a wide range of audiences
+ Current knowledge of malware trends and current cybersecurity issues
+ Experience with PKI/Certificates, Cryptography
Preferred Qualifications that Set You Apart:
+ Current knowledge of trends in security specific to control systems
+ Experience in the ICS or Automotive Industry
+ Experience with other OT network technologies and Cloud
+ Experience working with geographically distributed teams in a 100+ developer organization.
+ Certifications such as CISSP, CEH, GSSP, GSEC, CSSLP, GIAC, ISA Cybersecurity, etc.
Our Offer to You:
By joining Emerson, you will be given the opportunity to make a difference through the work you do.
Emerson's compensation and benefits programs are designed to be **competitive within the industry and local labor markets** . We also offer a **comprehensive medical and insurance coverage** to meet the needs of our employees.
We are committed to creating a global workplace that **supports diversity, equity and embraces inclusion** . We welcome foreign nationals to join us through our **Work Authorization Sponsorship** .
We attract, develop, and retain exceptional people in an inclusive environment, where all **employees can reach their greatest potential** . We are dedicated to the ongoing development of our employees because we know that it is critical to our success as a global company.
We have established our Remote Work Policy for eligible roles to promote **Work-Life Balance** through a hybrid work set up where our team members can take advantage of working both from home and at the office.
Safety is paramount to us, and we are relentless in our pursuit to provide a **Safe Working Environment** across our global network and facilities.
Through our benefits, development opportunities, and an inclusive and safe work environment, we aim to create an organization our people are proud to represent.
**Requisition ID** :
Emerson is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, age, marital status, political affiliation, sexual orientation, gender identity, genetic information, disability or protected veteran status. We are committed to providing a workplace free of any discrimination or harassment.
Application Security Consultant
Posted 1 day ago
Job Viewed
Job Description
Must to Have Responsibilities:
- Communication : Should be able to understand and articulate technical aspects clearly
- Cloud Security Expertise : Understand cloud development processes and provide security support throughout,
- Vulnerability Management : Hands-on with at least two tools like Nessus Pro, Tenable IO, FireEye, CrowdStrike, Defender, SpyCloud.
- Security Testing : Independently perform penetration testing (PT) and application security assessments as and when required,
- Security Advisory Role : Go beyond testing by suggesting fixes (e.g., recommending updated encryption protocols for IoT communication stacks),
- DevOps Integration : Strong grasp of CI/CD and automation practices.
- Programming Knowledge : Proficiency in at least a few languages such as Java, JavaScript/TypeScript, C++, C, Python, PowerShell, Unix Shell.
Secondary Skills
- Security Tools Experience to support during cyber incident
- SIEM/SOAR tools: Microsoft Sentinel, Splunk, Checkmarx.
Application Security Engineer
Posted 2 days ago
Job Viewed
Job Description
About us:
Foodsmart is the leading telenutrition and foodcare solution, backed by a robust network of Registered Dietitians. Our platform is designed to foster healthier food choices, drive lasting behavior change, and deliver long-term health outcomes. Through our highly personalized, digital platform, we guide our 2.2 million members—including those in employer-sponsored health plans, regional and national Medicaid managed care organizations, Medicare Advantage plans, and commercial insurers—on a tailored journey to eating well while saving time and money.
Foodsmart seamlessly integrates dietary assessments and nutrition counseling with online food ordering and cost-effective meal planning for the entire family, optimizing ingredients both at home and on the go. We partner with national and regional retailers across the U.S., many of whom accept SNAP/EBT, making healthier food more accessible. Additionally, we assist members with SNAP enrollment and management, providing tangible access to nutritious food.In 2024, Foodsmart secured a $200 million investment from TPG’s Rise Fund, which supports entrepreneurs dedicated to achieving the United Nations’ Sustainable Development Goals. This investment will help us expand our reach, particularly to low-income workers who are disproportionately affected by diet-related diseases.
At Foodsmart, our mission is to make nutritious food accessible and affordable for everyone, regardless of economic status. We are committed to a set of core values that shape our culture and work environment:
️ Measured: We make data-driven, truth-seeking decisions.
Impactful: We are fueled by achieving our mission and vision.