Infrastructure, Network & Security Engineer

Role Purpose

Application Security Assessment

• Conduct application security assessments, vulnerability assessments, and penetration testing.
• Identify and analyze security vulnerabilities across web, mobile, and API applications.
• Assess applications against OWASP and industry security standards.
• Recommend and track remediation of identified vulnerabilities.

Secure Software Development

• Integrate security practices into the Software Development Lifecycle (SDLC).
• Conduct security reviews of application architecture, designs, and source code.
• Provide secure coding guidance to development teams.
• Support implementation of Security by Design principles.

Security Testing & Automation

• Perform SAST, DAST, SCA, API security testing, and other application security testing.
• Configure and manage application security testing tools.
• Integrate security testing into CI/CD pipelines.
• Validate remediation and perform security regression testing.

Vulnerability Management

• Analyze, prioritize, and track application vulnerabilities based on risk.
• Coordinate with developers and technical teams for remediation.
• Conduct root cause analysis of security issues.
• Monitor emerging application security threats and vulnerabilities.

Security Architecture & Compliance

• Review application architectures for security risks and control gaps.
• Define and recommend application security controls and standards.
• Support compliance with organizational security policies and applicable regulations.
• Maintain application security guidelines, standards, and documentation.

Collaboration & Continuous Improvement

• Collaborate with developers, DevOps, infrastructure, QA, and cybersecurity teams.
• Conduct security awareness and secure coding sessions for development teams.
• Provide technical guidance on application security risks and remediation.
• Continuously evaluate and improve application security processes and tools.

Qualifications

• 4–6 years of relevant experience in Application Security, Cybersecurity, or Information Security.
• Strong experience in application security testing and vulnerability assessment.
• Hands-on experience with web applications, mobile applications, APIs, and cloud environments.
• Strong understanding of OWASP Top 10 and secure coding practices.
• Experience with SAST, DAST, SCA, penetration testing, and vulnerability management.
• Experience integrating security into SDLC and CI/CD environments.
• Strong knowledge of application security threats, vulnerabilities, and remediation techniques.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field.
• Relevant certifications such as OSCP, CEH, GWAPT, CSSLP, or Security+ are an advantage.

Job Specific Technical Skills

• Application Security
• OWASP Top 10
• Web & Mobile Application Security
• API Security
• SAST / DAST / SCA
• Vulnerability Assessment & Penetration Testing
• Secure SDLC / DevSecOps
• Secure Coding Practices
• CI/CD Security Integration
• Threat Modeling & Risk Assessment
• Source Code & Security Review
• Security Testing Tools

Application Questions

• What is your salary expectation?
• What will be your notice period to join once selected?
• Do you have strong experience in application security testing and vulnerability assessment?
• Do you have experience with SAST, DAST, SCA, penetration testing, and vulnerability management?
• Do you have Experience integrating security into SDLC and CI/CD environments?
• Do you have strong knowledge of application security threats, vulnerabilities, and remediation techniques