Senior Application Security Engineer

Role: Senior Security Expert

Department: Engineering / Development / R&D

Reports To: DevSecOps Lead (Techno-Managerial)

Experience: 10-12 years

About the Job:

We are looking for a Senior Security Expert to drive AppSec practices, secure SDLC processes, and ISO 27001aligned security controls across Engineering. The role focuses on implementing secure coding guidelines, evaluating and rolling out AppSec tools (SAST/DAST/dependency scanning), supporting pen testing, and leading security automation across CI/CD pipelines. The candidate will work closely with the DevSecOps Lead to document controls, automate evidence collection, and help development teams adopt and remediate security findings effectively.

Roles & Responsibility: -

• Support ISO documentation and controls related to SDLC, secure coding, and CI/CD pipelines.
• Evaluate and recommend security tools (SAST/DAST/dependency scanning) to meet ISMS requirements.
• Maintain AppSec documentation (secure dev practices, threat models, design reviews, code reviews).
• Ensure ISO-aligned security practices are embedded in development lifecycle.
• Collaborate with Engg & DevSecOps teams for implementation, automation and tracking of controls.
• Assist in generating technical evidence for audits (logs, pipeline runs, tool outputs).

Provide hands-on support to dev teams to adopt secure patterns and fix findings.

Technical skills:

• 10 years of experience in security or secure SDLC (hands-on AppSec).
• Familiarity with ISO 9001 and ISO 27001 controls as they apply to application security.
• Hands-on experience with SAST, DAST, dependency scanning and threat modeling tools.
• Ability to document and validate secure design processes for ISO controls.
• Strong communicator and collaborator with engineering teams.

Work Experience: 10 years

Educational Qualification:

BE. / B.Tech., M.E./M.Tech. or M. Sc. in Computer Science / Electronics Engineering / MCA

Location: Bangalore