Application Security Engineer (Security Consultant)
Practical DevSecOps (company site, opens in a new tab)5–8 yrsRemoteDirect career pageEst. 18–32 LPA
Posted 12h ago
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Reach people at Practical DevSecOps
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at Practical DevSecOps you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Plan and execute comprehensive penetration tests for web, API, mobile apps, cloud, and internal networks including threat modeling and exploit development.
- Integrate security into SDLC by implementing Secure-SDLC frameworks, embedding security tooling (SAST, DAST, SCA, secrets scanning) in CI/CD pipelines, and conducting secure architecture reviews and cloud security assessments.
- Serve as primary security contact for clients, manage engagements and deliverables including reports, remediation roadmaps, and contribute to pre-sales and service development activities.
Minimum Requirements
- 5-8 years of hands-on experience in penetration testing and application security/DevSecOps.
- Proficiency with offensive security tools such as Burp Suite Pro, Metasploit, Nmap, Nessus/OpenVAS, BloodHound, Cobalt Strike, or equivalents.
- Experience with at least one major cloud platform (AWS, Azure, or GCP) and knowledge of cloud security including IAM misconfigurations and serverless security.
- Hands-on experience integrating security tools into CI/CD pipelines and scripting skills in Python, Bash, or PowerShell.
Ideal Candidate Profile
- Demonstrates technical depth in both offensive security (pentesting, exploit development) and embedding security throughout the software development lifecycle.
- Experienced in client-facing consulting roles managing stakeholders and delivering high-impact security engagements and deliverables.
- Capable of working across diverse technologies including multiple programming languages, cloud environments, and security toolsets, reflecting a broad and integrated security skill set.