Senior Application Security Engineer
- Sunovaa Tech
- 7 - 10 years
- Bengaluru
- 4 days ago
- Email to a friend
- Report this job
Job Description
Job Description Product & Solution Security Expert (PSSE)
Location
Bangalore
Experience
7+ Years
Job Summary
We are looking for a highly skilled and motivated Product & Solution Security Expert (PSSE) with 7+ years of experience in Application Security and DevSecOps. The ideal candidate will be responsible for integrating security practices into the Software Development Life Cycle (SDLC), performing threat modeling, secure code reviews, vulnerability assessments, and ensuring secure product development.
The candidate will work closely with development, DevOps, cloud, architecture, and product teams to strengthen the overall security posture of applications and solutions.
Key Responsibilities
Secure SDLC Integration
- Integrate security practices across all phases of the Software Development Life Cycle (SDLC).
- Collaborate with software development teams to ensure secure design, development, testing, and deployment.
- Define and implement secure coding standards and security requirements.
- Conduct secure architecture and design reviews.
Application Security Activities
- Perform Threat Modeling and risk assessments for applications and products.
- Conduct secure code reviews using tools like SonarQube and other SAST tools.
- Identify, analyze, and remediate application vulnerabilities.
- Ensure adherence to OWASP Top 10 and secure coding best practices.
DevSecOps & CI/CD Security
- Integrate security controls into CI/CD pipelines.
- Implement and manage SAST, DAST, SCA, and vulnerability scanning tools.
- Automate security testing processes within DevOps workflows.
- Support container and cloud security initiatives.
Security Tools & Technologies
- Work with security tools such as:
- SonarQube
- Checkmarx
- Veracode
- Snyk
- Fortify
- Burp Suite
- Perform Software Composition Analysis (SCA) for open-source dependency management.
- Monitor and improve application security posture.
Stakeholder Collaboration
- Work closely with developers, architects, DevOps teams, and product managers.
- Communicate security risks, findings, and remediation strategies to technical and non-technical stakeholders.
- Promote security awareness and secure development culture across teams.
Training & Awareness
- Conduct secure coding and security awareness sessions for development teams.
- Share best practices related to application security and DevSecOps.
Job Classification
Industry: Emerging Technologies (AI/ML)Functional Area / Department: IT & Information SecurityRole Category: IT SecurityRole: Cyber SecurityEmployement Type: Full timeContact Details:
Company: Sunovaa TechLocation(s): Bengaluru
Keyskills: Application Security Threat Modeling Owasp Top Sast Dast SCA Cloud Security Testing Devsecops Secure Code Review Sonarqube Vulnerability Assessment
Similar positions
Sunovaa Tech
Sunovaa is the trusted partner helping clients succeed by delivering business Outcomes through highly efficient Business Intelligence, Reporting, Data Visualization, Advanced Analytics solutions & Data Services. Sunovaa consistently delivers excellence across the globe through proficient interlockin...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in