FC Global Services India LLP (First Citizens India), a part of First Citizens BancShares, Inc., a top 20 U.S. financial institution, is a global capability center (GCC) based in Bengaluru. Our India-based teams benefit from the company's over 125-year legacy of strength and stability. First Citizens India is responsible for delivering value and managing risks for our lines of business. We are particularly proud of our strong, relationship-driven culture and our long-term approach, which are deeply ingrained in our talented workforce. This is evident across all key areas of our operations, including Technology, Enterprise Operations, Finance, Cybersecurity, Risk Management, and Credit Administration. We are seeking talented individuals to join us in our mission of providing solutions fit for our clients greatest ambitions.
Job Description
Value Preposition
- We are seeking an experienced and proactive Application Security Engineer II to join our growing security team within a highly regulated banking environment. This role focuses on implementing, managing, and continuously improving the secure software development lifecycle (SSDLC) with a strong emphasis on static (SAST), dynamic (DAST), and software composition analysis (SCA) tooling and processes.
- You will work closely with Engineering and DevSecOps teams to embed security into our CI/CD pipelines, support vulnerability remediation, and improve code quality at scale.
Job Details
Position Title:
Application Security Engineer II
Career Level: P2
Job Category: Sr. Associate
Role Type: Hybrid
Job Location: Bangalore
About The Team
Our team is part of Enterprise Cyber Security Office India, a focused and results-driven unit within Cyber Operations team. Our core mission is to secure our organization's applications by embedding security into every phase of the Software Development Life Cycle (SDLC).
We work hands-on with tools and processes, driving continuous improvement across key domains: Static (SAST) & Dynamic (DAST) Testing, Software Composition Analysis (SCA), API Security, Vulnerability Management by efficiently triaging false positives and tuning security controls for high-fidelity results.
Impact
As an Application Security Engineer, you will be paramount to our defense strategy. You will directly reduce organizational risk by eliminating critical vulnerabilities, enable secure innovation by integrating security early, and drive cultural change by elevating secure coding practices organization wide.
Key Deliverables (Duties And Responsibilities)
- Lead integration and tuning of SAST, DAST, and SCA tools across application pipelines.
- Ensure comprehensive coverage of both in-house and third-party codebases, Web Applications, and APIs.
- Review scan results, triage false positives, and guide developers on effective remediation.
- Define and enforce secure coding standards across engineering teams.
- Automate security checks in CI/CD(Gitlab) to ensure shift-left security.
- Produce actionable security reports and dashboards for technical and risk teams.
Preferred Qualification
Skills and Qualification (Functional and Technical Skills)
- Bachelor's or Master's Degree in Computer science, Information Security or related field.
- 5+ years of experience in Application Security Testing.
- Deep expertise in SAST/DAST/SCA tools (e.g., Veracode, Snyk, Checkmarx or Similar).
Core Competencies
- Solid understanding of common vulnerability standards (e.g., OWASP Top 10) and secure coding best practices for languages such as Java, JavaScript, Python etc.
- Proficiency in scripting and automation (e.g., Python, Java, JavaScript, Bash, or PowerShell scripting)
- Experience in a regulated industry (banking/finance) preferred.
- Excellent communication and problem-solving skills.
Relationship & Collaboration
- Collaborate with engineering leads to ensure security SLAs are met.
- Contribute to team discussions, retrospectives, and improvement initiatives with a continuous learning mindset.
- Take ownership of components or areas of responsibility, ensuring accountability, follow-through and collaborative problem solving
Accessibility Needs
We are committed to providing an inclusive and accessible hiring process. If you require accommodations at any stage (e.g. application, interviews, onboarding) please let us know, and we will work with you to ensure a seamless experience.
Equal Employment Opportunity
FC Global Services India LLP (First Citizens India) is an Equal Employment Opportunity Employer. We are committed to fostering an inclusive and accessible environment and prohibit all forms of discrimination on the basis of gender, religion, caste, disability, sexual orientation, economic status or any other characteristics protected by the law. We strive to foster a safe and respectful environment in which all individuals are treated with respect and dignity. Our EEO policy ensures fairness throughout the employee life cycle. 
