Back
Mid-level AppSec in a metro with brand recognition and broad tooling requirements creates moderate competition.
AppSec skills (SAST/DAST, CI/CD) are transferable, but product-security experience increases domain specificity.
Explicit 5+ years and mandatory AppSec tooling and remediation experience enforce strict shortlisting.
Login to See Your Match Score
Create a free account or log in to unlock your CV match score across:
Lead execution of application security testing including SAST, DAST, SCA, secret and IaC scanning integrated into CI/CD pipelines.
Conduct secure design reviews, threat modeling, and support secure-by-design guardrails within product engineering teams.
Build automation and pipelines to scale testing coverage and support vulnerability remediation and secure coding adoption.
Bachelor's degree in Cybersecurity, Computer Science, Software Engineering, or related field.
5+ years of experience in application/product security or security-focused software engineering.
Hands-on experience with application security testing tools and techniques (SAST, DAST, SCA, IaC scanning, secure design review, threat modeling).
Role is onsite in Pune/Bangalore; experience with CI/CD integrated app security tooling mandatory.
Experienced working independently with product engineering teams to remediate vulnerabilities and enforce secure coding practices.
Familiarity with cloud-native/Kubernetes security, API security, software supply chain risk, and SBOM processes is advantageous.
Capable of tuning security tools to reduce false positives and prioritizing vulnerabilities effectively.