Application Security Engineer
OakNorth (company site, opens in a new tab)GurugramHybridDirect career pageEst. 18–36 LPA
Posted 1d ago
Reach people at OakNorth
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at OakNorth you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Own remediation of complex application and AI security vulnerabilities not fixable by automation, including architectural and legacy code issues.
- Coordinate multi-team, cross-service security fixes related to authentication, authorisation, and agentic systems to ensure safe delivery.
- Contribute to development and safeguard internal AI coding agent platforms, define guardrails, and secure CI/CD pipelines to scale remediation safely.
Minimum Requirements
- Proven hands-on full-stack engineering skills with proficiency in languages such as Java, Python, C#, or JavaScript/TypeScript.
- Strong application security expertise, including OWASP Top 10 vulnerabilities and deep understanding of authentication and authorisation protocols (OAuth 2.0, OIDC, SAML, JWT).
- Experience working with GitHub workflows, branch protection, code scanning, and securing release pipelines (GitHub Actions).
- Work Experience Required: Not explicitly mentioned in the JD.
Ideal Candidate Profile
- Experienced in fixing security vulnerabilities across architecture and legacy systems with ability to manage complex change across multiple teams and services.
- Practical user of AI coding agents for code review and remediation, knowledgeable about AI-specific security risks and mitigation strategies.
- Skilled in collaborating with engineering teams to deliver security fixes, balancing risk, and communicating progress clearly across global stakeholders.