Application Security Engineer (Appsec) - Bengaluru

Lead end-to-end application security testing and secure code reviews for Web, Mobile, and Thick Client apps across the product suite.

Drive threat modeling, security architecture reviews, and root cause analysis for critical vulnerabilities, collaborating closely with product and engineering teams.

Implement and improve scalable security processes, automation (e.g., Semgrep), and development guardrails to enhance overall product security posture.

2 to 8 years of experience in Application/Product Security including mandatory penetration testing and manual source code reviews.

Hands-on expertise in Web, Mobile (Android/iOS), and Thick Client security testing and manual code reviews across multiple languages (Java, Kotlin, Swift, JS, Python, C#/.NET).

Experience with security tools and automation such as Semgrep, SAST/DAST, and custom scripts.

Work Experience Required: 2 to 8 years; Notice Period: Not explicitly mentioned in the JD.

Technically deep individual contributor with experience leading security initiatives in product environments involving multiple platforms and languages.

Comfortable working directly with product and engineering teams to influence secure design and remediation strategies early in development.

Experienced in threat modeling, secure design patterns, and integrating security practices into CI/CD pipelines and automation workflows.