Vacancy description
Security Architect / Application Security Engineer in भारत
Terrabit Consulting Pvt. Ltd - India
- Full-timeStandard weekly hours
भारत
Planned for Conversion to FTE
Task Description: Security Architect / Application Security Engineer
We are looking for a hands-on Security Engineer/Architect to embed Security byDesign into our applications and work directly with development teams and
senior technical stakeholders. Key responsibilities: • Review, validate, categorize and prioritize findings from Checkmarx, Fortify,
penetration tests, SAST/DAST and other security tools, distinguishing real
vulnerabilities from false positives. • Perform hands-on penetration testing, vulnerability analysis, threat
modeling, secure code reviews and attack-path analysis. • Design and review secure application architectures, APIs, integrations,
authentication/authorization, data flows and cloud components. • Define and validate remediation of security findings and challenge proposed
fixes where the underlying risk is not adequately addressed. • Work directly with developers, architects and the CISO to establish security
requirements and drive Security by Design. • Use automation and AI to improve vulnerability analysis, remediation and
application security. Required skills: • Strong hands-on Application/Product Security or Security Engineering
background. • Practical ethical hacking and penetration-testing experience; able to
reproduce and exploit vulnerabilities, not just report them.
Responsibilities
Planned for Conversion to FTE
Task Description: Security Architect / Application Security Engineer
We are looking for a hands-on Security Engineer/Architect to embed Security by
Design into our applications and work directly with development teams and
senior technical stakeholders.
Key responsibilities:
• Review, validate, categorize and prioritize findings from Checkmarx, Fortify,
penetration tests, SAST/DAST and other security tools, distinguishing real
vulnerabilities from false positives.
• Perform hands-on penetration testing, vulnerability analysis, threat
modeling, secure code reviews and attack-path analysis.
• Design and review secure application architectures, APIs, integrations,
authentication/authorization, data flows and cloud components.
• Define and validate remediation of security findings and challenge proposed
fixes where the underlying risk is not adequately addressed.
• Work directly with developers, architects and the CISO to establish security
requirements and drive Security by Design.
• Use automation and AI to improve vulnerability analysis, remediation and
application security.
Required skills:
• Strong hands-on Application/Product Security or Security Engineering
background.
• Practical ethical hacking and penetration-testing experience; able to
reproduce and exploit vulnerabilities, not just report them.
Qualifications
Any degree