Application Security Engineer

Experience:

Minimum 3 Years Education: BE/B.Tech/MCA/BCA in Computer Science or related field Certification: CEH or CISSP

Job Summary

We are seeking an experienced Application Security Analyst to perform application security assessments, secure code reviews, vulnerability analysis, and support secure software development practices.

The ideal candidate will have hands-on experience with application security tools, secure coding reviews, CI/CD integration, and vulnerability remediation.

Key Responsibilities

• Perform day-to-day application security assessments and vulnerability testing.

• Conduct secure source code reviews for applications developed in Java, .NET, PHP, Python, and JavaScript.

• Utilize SAST/DAST tools to identify and remediate security vulnerabilities.

• Work with HCL AppScan (Source, Enterprise, or Cloud) for application security testing.

• Perform vulnerability assessments using Burp Suite, OWASP ZAP, and Nessus.

• Integrate AppScan with CI/CD pipelines using Jenkins, Azure DevOps, or similar tools.

• Coordinate with OEM/vendor for technical support, service requests, upgrades, and training.

• Deploy product updates, patches, and upgrades as released by the OEM.

• Conduct security awareness and application security training sessions for developers and technical teams.

• Maintain security assessment reports, audit documentation, upgrade records, and monthly status reports.

• Support application security audits and assist development teams in vulnerability remediation.

• Perform mobile application security testing using emulators such as Knox, Genymotion, or similar platforms.

Required Skills & Technical Expertise

• Hands-on experience with HCL AppScan Source, Enterprise, or Cloud. • Strong understanding of SAST, DAST, and application security methodologies.

• Experience with: Burp Suite OWASP ZAP Nessus

• Secure code review expertise in: Java .NET PHP Python JavaScript • Experience integrating security testing into CI/CD pipelines (Jenkins, Azure DevOps, etc.).

• Knowledge of mobile application security testing.

• Strong understanding of OWASP Top 10, secure coding standards, and vulnerability remediation.

• Excellent documentation, reporting, and communication skills. Preferred Qualifications

• Experience in application security audits and compliance assessments.

• Knowledge of DevSecOps practices.

• Ability to work with cross-functional development and infrastructure teams.

• Experience preparing security assessment reports and remediation tracking.