Justdial - Application Security Specialist (3-4 yrs)

Location : Bangalore

Job Description :

Application Security Specialist providing security expertise for web and mobile projects, ensuring compliance with enterprise and IT security policies, industry regulations, and best practices.

Responsibilities :

- Provide security guidance for web and mobile projects to meet security policies, regulations, and best practices.

- Develop runtime analysis capabilities to identify security vulnerabilities.

- Ensure application quality through the secure development lifecycle.

- Research, develop, and advocate for new security tools and patterns.

- Collaborate with engineering teams to maintain secure architecture.

Minimum Requirements :

- 3 years of experience in application security, solving security problems in large-scale systems.

- Minimum 1 year of experience in static application security testing (SAST) tools.

- Experience with CI/CD pipelines and integrating security scanning tools.

- Experience with security scanning tools, web application pen testing, fuzzing, and DAST.

- Expertise in verifying and communicating common security vulnerabilities.

- Familiarity with software development responsibilities and workflows.

Nice to Have :

- Experience with security architecture patterns and standards.

- Knowledge of cryptography, including algorithms and standards.

- Familiarity with technologies such as :

a. Mobile platforms (iOS, Android)

b. Web frameworks (React, GraphQL)

c. CI/CD tools (Jenkins, GitLab CI/CD, CircleCI)

Key Skills :

- Application security expertise

- Secure coding practices

- Vulnerability assessment and penetration testing

- Security architecture and design

- Communication and collaboration

- SAST tools (e.g., Veracode, Checkmarx, SonarQube)

- CI/CD security integration

What We Offer :

- Competitive salary and benefits package

- Opportunity to work on complex security challenges

- Collaborative and dynamic work environment

- Professional development and growth opportunities

Certifications : (like) OffSec, CompTIA Security+, CEH