Senior application security engineer

Job Title: Senior Application Security Engineer

Location: Bengaluru

Experience: 5 to 8 Years

Job Type: Full time/ Permanent

Notice Period: Immediate to 30 Days

Job Summary

The Senior Application Security Engineer supports Elevate's application security strategy by identifying and helping remediate security vulnerabilities across applications, APIs, and AI-enabled solutions. This role partners with development teams to integrate security into the software development lifecycle, implement secure development practices, and strengthen the organization's security posture through automation, risk assessments, and security engineering initiatives. The position serves as a liaison between Security and Application Development teams, providing guidance on secure coding, vulnerability management, and emerging application, cloud, and AI security risks.

Principal Duties and Responsibilities

Performs automated and manual security testing of new and existing applications, APIs, and code to identify security vulnerabilities. Supports company AI initiatives by helping establish secure development practices, conducting security testing, and implementing safeguards for AI solutions. Administers and maintains application security tools to ensure comprehensive code coverage, high-fidelity findings, and integration into development workflows. Collaborates with development teams to remediate application and AI security vulnerabilities. Contributes to application security projects and broader security engineering automation and integration efforts. Performs research on emerging security threats, technologies, tools, and techniques to improve existing processes and capabilities. Prioritizes, tracks, and drives remediation efforts with application development teams. Assists in the development and integration of security automation and Dev Sec Ops practices. Performs additional duties as assigned.

Experience and Education

5+ years of experience in application security, secure software development, or application QA automation. Application development experience required (. NET, Angular, C#, Java Script, or similar technologies preferred). Security testing experience focused on web applications, APIs, and related technologies. Experience with SAST, DAST, Software Composition Analysis (SCA), secrets detection, or comparable application security tooling. Intermediate knowledge of software architecture, networking, infrastructure, protocols, and industry standards. Experience with automation and scripting using Python, Power Shell, Terraform, or similar technologies. Aptitude for researching and evaluating emerging application, infrastructure, and AI-related cyber threats. Knowledge of common web application vulnerabilities, exploitation techniques, and remediation methods. Experience with Azure Dev Ops, Jenkins, or similar CI/CD platforms. Experience integrating security controls into CI/CD pipelines and implementing Dev Sec Ops practices. Strong verbal and written communication skills. Experience working in Microsoft Azure environments. Bachelor's degree in Computer Science, Information Systems, or a related field (Optional).

Core Traits

Solves problems through a methodical, analytical, data-driven approach and develops practical, cost-effective, and innovative solutions. Takes ownership of critical tasks and outcomes, proactively driving work to completion, especially in team environments with cross-functional dependencies. Embraces challenges outside their comfort zone, continuously expands technical knowledge through self-directed learning, and adapts quickly to new technologies and business needs. Challenges the status quo, proposes improvements, and focuses on achieving the best outcomes for the organization. Collaborates effectively across teams and departments while openly sharing information and knowledge. Works effectively in the face of ambiguity, shifting priorities, stressful situations, and complex challenges while maintaining a long-term architectural perspective.