Application Security Specialist
Ramboll · Chennai · onsite · Posted 28d ago
Undisclosed5–10 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
The Application Security Specialist operates at the intersection of Information Security and Assurance (ISA) and DevSecOps, ensuring that application security is embedded, measurable, and compliant across Ramboll's global digital landscape and application development. This role focuses on integrating security into engineering workflows while aligning with enterprise security frameworks such as ISO 12207 / ISO/IEC 27001 / CIS 18 and industry best practices like OWASP. The Application Security specialist is responsible for identifying, analyzing, and mitigating security vulnerabilities in applications throughout the software development lifecycle (SDLC). This role works closely with development, DevOps, and security teams to ensure secure coding practices and compliance with organizational and industry standards. You will work closely with RamTech, data compliance, regulatory and business teams.
Responsibilities
- Translate security policies into actionable technical controls for development teams
- Ensure alignment with ISO/IEC 27001
- CIS Critical Security Controls
- OWASP Top 10
- Support internal/external audits by providing application security evidence and metrics
- Contribute to risk registers, control effectiveness reviews, and exception handling
- Embed application security controls into CI/CD pipelines across business units
- Drive adoption of security-by-design and shift-left security practices
- Integrate and manage tools for SAST, DAST, SCA, Secrets Scanning
- Partner with DevOps teams to standardize secure pipelines globally
- Perform risk-based vulnerability assessments and prioritize remediation
- Align risk ratings aligned with Cyber and Information security risk methodology
- Track remediation SLAs and report on risk posture to CISO office
- Conduct threat modeling for critical applications and digital solutions
- Oversee and/or perform secure code reviews
- Penetration testing (manual automated)
- Validate vulnerability fixes and ensure closure meets compliance requirements
- Establish baseline security requirements for all applications
- Act as a security champion enabler across distributed engineering teams
- Provide secure coding guidance and conduct targeted training sessions
- Develop reusable secure design patterns and reference architectures.
- Define and track KPIs such as vulnerability density
- Mean Time to Remediate (MTTR)
- % of applications onboarded to DevSecOps pipelines
- Build dashboards for leadership visibility and regulatory reporting
- Drive continuous improvement initiatives across global teams
Technical Skills
- Strong understanding of web technologies (HTTP, REST APIs, microservices)
- Authentication and authorization mechanisms (OAuth, JWT, SSO)
- Knowledge of common vulnerabilities (e.g., SQL Injection, XSS, CSRF)
- Experience with security tools such as SAST: Checkmarx, Fortify
- Experience with security tools such as DAST: Burp Suite, Acunetix
- Experience with security tools such as SCA: Snyk, Black Duck
- Familiarity with programming languages (Java, Python, JavaScript, .NET)
Security Knowledge
- Hands-on experience with OWASP Top 10 risks
- Understanding of threat modeling methodologies
- Experience in bridging policy-to-technical implementation gaps
- Knowledge of cloud security (AWS, Azure, GCP) is a plus
About you
- 5+ years in Application Security, Cyber Security, or Software Development
- Experience working in Agile/DevOps environments
- Prior experience in secure coding or vulnerability management preferred
- Certifications (Preferred) : csslp, OSCP, cissp, gwapt
Nice to Have
- Experience with bug bounty programs
- Knowledge of container security (Docker, Kubernetes)
- Experience with Infrastructure as Code (IaC) security tools
Disclaimer: This job posting and location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Skills
AgileCI/CD Pipelinescloud platformsapisamazon web servicescontainer securityauditsBurp SuitecisspContainerCISOCheckmarxBlack DuckcloudCloud SecurityApplication SecurityArchitectureApplication DevelopmentcomplianceMicrosoft AzureArtificial Intelligence
About Ramboll
Ramboll
Engineering & Construction
1.9k+
employees
1945
81 years old
Copenhagen, Denmark
Denmark
About
Ramboll is a global architecture, engineering and consultancy company founded in Denmark in 1945. Ramboll combines local experience with a global knowledge base to create sustainable cities.
Industries
Engineering & ConstructionConsulting
Employee ratings
642 reviews
3.9/ 5
Culture
4.1
Career growth
3.2
Work-life
4.1
Employees rate it well for
Work Life Balance115Work Culture72Senior Management61Salary57Work Environment42
Find them on