Senior Application Security Engineer ID71667
On-siteMumbai, Maharashtra, India
Job Summary
Engineer and deploy AI-enabled secure code scanning capabilities and "Golden Images" to drive secure-from-the-start adoption. Automate the development of secure coding patterns and integrate them with traditional and Agentic SDLC workflows. Architect the integration of continuous security scanning tools (SAST, DAST, SCA) into enterprise CI/CD pipelines, tuning them to eliminate noise. Act as a senior technical SME, reading and reviewing complex application code (Java/Python) to provide software engineers with highly specific, code-level remediation guidance. Work with full autonomy and no daily supervision to map out and build automated security runbooks.
Required Qualifications
- 5+ years combining software engineering experience, security implementation and/or architecture experience
- Strong coding and architectural proficiency in Python (for security automation and scripting)
- Fully autonomous execution capability, requiring no daily supervision to map out and build automated security runbooks
- Upper-Intermediate English level
Desired Qualifications
- AppSec and DevSecOps experience
- SAST/DAST/SCA and Java expertise
- Deep, hands-on expertise deploying and tuning modern application security testing tools (SAST, DAST, SCA) and integrating them into complex CI/CD orchestration ecosystems
- Experience integrating LLMs, AI agents, or automated coding assistants to streamline vulnerability triaging or secure code generation
- Advanced application threat modeling experience
- Ability to confidently read, review, and secure enterprise source Java code
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.