Claranet - Application Security Engineer - Security Vulnerability Analysis in भारत

Role : Application Security EngineerClaranet is looking for an Application Security Engineer with expertise in secure code reviews, application security testing, and vulnerability analysis. The role involves identifying vulnerabilities across applications and services, validating security findings, recommending remediation measures, and supporting Secure SDLC initiatives for global https://jobeax.com/link/OBSYxKmspgkYWOcn Responsibilities :- Conduct manual code reviews, Software Composition Analysis (SCA), and static vulnerability scanning.- Review web applications, web services, mobile applications, and front-end and back-end services.- Identify and validate security vulnerabilities, including business logic flaws.- Analyze automated scanning results, investigate false positives and false negatives, and validate findings.- Communicate technical vulnerabilities, business risks, and remediation recommendations to clients and internal teams.- Support development teams in resolving identified security issues.- Contribute to Secure SDLC projects and integrate security tools into CI/CD pipelines.- Participate in client calls, technical discussions, and project scoping activities.- Stay updated on emerging security threats and contribute to security research, presentations, and https://jobeax.com/link/QRx7ITS6Mb6NOfkB Skills & Qualifications :- 4+ years of experience in application security and secure code reviews.- 2+ years of client-facing consulting experience involving DAST, SAST, and SCA.- Experience with security tools such as Checkmarx, WebInspect, Fortify, Snyk, WhiteSource, ShiftLeft, Semgrep, or CodeQL.- Strong understanding of manual code review, business logic vulnerabilities, and the OWASP Code Review Guide.- Knowledge of C, C++, Java, and .NET.- Experience with at least one scripting language, such as Python, Ruby, Bash, or JavaScript.- Familiarity with Windows and Linux operating systems.- Knowledge of CI/CD tools such as GitHub Actions, Jenkins, Azure DevOps, and GitLab CI.- Ability to communicate complex security findings and remediation recommendations clearly.- Strong ethical standards and a commitment to application https://jobeax.com/link/Mi5n91E7d3Siarrs to Have:- Programming experience in Java, .NET, or JavaScript.- Familiarity with AWS, Kubernetes, Docker, and Terraform.- Experience integrating security tools into CI/CD pipelines as part of Secure SDLC.- Certifications such as GPEN, GXPN, GMOB, GWAPT, OSWE, OSCP, OSCE, OSWP, CNCF, or AWS certifications. (ref:hirist.tech)