Application Security Engineer

Role: Application security Testing Engineer

Location: Hyderabad

Experience: 5+ Yrs

Immediate Joiners only

Key Responsibilities:

• Conduct Software Composition Analysis (SCA) to identify and mitigate vulnerabilities in open-source and third-party components.
• Perform Static Application Security Testing (SAST) to analyze source code for security flaws.
• Execute Dynamic Application Security Testing (DAST) to test running applications for vulnerabilities.
• Implement and maintain Threat Modeling processes to proactively identify and mitigate potential security threats.
• Configure and manage Web Application Firewalls (WAF) to protect applications from common web-based attacks.
• Collaborate with development teams to integrate security best practices into the software development lifecycle.
• Stay updated with the latest security trends, threats, and tools in the industry.

Required Skills and Experience:

• 5+ years of experience in application security, with a focus on software security testing tools.
• Proficiency in SCA, SAST, DAST, Threat Modeling, and WAF.
• Strong understanding of web application security and common vulnerabilities.
• Experience with security tools such as Veracode, SonarQube, OWASP ZAP, and ModSecurity.
• Knowledge of secure coding practices and software development lifecycle (SDLC).
• Excellent problem-solving and analytical skills.
• Strong communication and collaboration skills.