Application Security Engineer
On-site · Pune, Maharashtra, India
Job Summary
Lead security across the software development lifecycle for Strategy’s applications by designing and implementing secure application architectures, performing threat modeling, and guiding secure coding practices. Own secure SDLC processes, conduct SAST/DAST/IAST/SCA-based vulnerability management and penetration testing, perform secure code reviews, and drive DevSecOps initiatives. Build and deliver security training (OWASP Top 10, threat modeling, AI security risks) for engineering teams; coordinate incident response and remediation; mentor junior engineers and security champions; require a Bachelor’s degree and 5+ years in software development or security with hands-on experience across containerized deployments, cloud platforms, API security, supply chain security, and AI security considerations.
Required Qualifications
- Bachelor's degree in Computer Science, Engineering, or related field
- Minimum 5 years of software development or software security experience in an agile environment
- Hands-on experience with SAST, DAST, IAST, and SCA tools (e.g., GitHub Advanced Security, Checkmarx, Fortify, Veracode, SonarQube, Burp Suite, ZAP)
- Deep knowledge of API security (OWASP API Top 10, GraphQL security)
- Experience in securing containerized applications (Docker, Kubernetes)
- Knowledge of supply chain security risks (SBOM, software dependency management)
- Familiarity with AI/ML security risks and adversarial machine learning techniques
- Experience with Infrastructure as Code (IaC) security (Terraform, CloudFormation)
- Fluent in programming languages such as Python, Java, JavaScript
- Strong knowledge of secure coding principles and application security frameworks
- Familiarity with security standards and regulations (OWASP, NIST)
- Hands-on experience securing AI/ML applications, understanding adversarial attacks, model poisoning, and data privacy risks
- Experience with cloud security best practices (AWS, Azure, or GCP)
- Experience with AI security best practices and implementations
- Strong collaboration and communication skills
- Mentoring experience and ability to lead security champions
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.