Senior Security Engineer I

A Leading Technology Services Firm is seeking an analytical Senior Security Engineer to join its application security practice in Bengaluru. In this critical software assurance role, you will embed robust security controls into the software development lifecycle, conduct rigorous security reviews, and execute threat modeling exercises. Furthermore, you will drive DevSecOps practices across automated delivery pipelines to safeguard enterprise applications against vulnerabilities. Consequently, this position is vital for mitigating digital security risks and protecting enterprise assets at scale.

The Senior Security Engineer must combine deep application security expertise with a strong understanding of international security frameworks such as OWASP Top 10 and NIST SSDF. Working closely with business and technical stakeholders, you will deliver expert guidance on secure coding techniques while balancing technical security controls with corporate goals. Therefore, the organization is looking for a proactive security advocate who mentors software developers comfortably under fast-paced deployment schedules. If you want to steer advanced application defense strategies, this role is for you.

Key Responsibilities

• Apply expert knowledge of application security practices and software security frameworks (OWASP Top 10, NIST SSDF).
• Lead application security design reviews, code evaluations, and comprehensive threat modeling activities.
• Implement DevSecOps methodologies to seamlessly integrate security controls into CI/CD build pipelines.
• Consult with business and technical representatives to balance security controls with operational business requirements.
• Provide technical guidance to engineering teams regarding secure coding patterns and vulnerability mitigation strategies.
• Support enterprise risk management frameworks by identifying, assessing, and mitigating application security risks.
• Mentor software engineers and cross-functional teams on secure application design and core security principles.
• Utilize specialized application security tooling (e.g., Snyk, GitHub Advanced Security) to automate vulnerability scanning.

Requirements and Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or an allied technical domain.
• 5-9 Years of core experience operating as a Security Engineer, AppSec Specialist, or DevSecOps Engineer.
• Strong hands-on expertise in application security, threat modeling, and frameworks like OWASP Top 10 and NIST SSDF.
• Demonstrated technical experience integrating security tools into CI/CD pipelines and automating DevSecOps practices.
• Beneficial: Programming experience (e.g., Python) for security tool automation and familiarity with Snyk or GitHub Advanced Security.