Senior Application Security Engineer - India

Finalsite

Contract type

Ongoing

Work mode

100% remote

Experience

Senior · 7+ years

Job description

Conduct technical triage on security vulnerabilities identified across web applications via SAST, DAST, penetration testing reports, and bug bounty programs
Modify and refactor .NET/C# code to remediate identified security vulnerabilities in accordance with established risk prioritization schedules
Develop, maintain, and enforce secure coding standards across development teams; implement reusable secure coding patterns (e.g., ORM, output encoding frameworks) to catch vulnerabilities early in the SDLC
Directly assist software developers with code reviews to verify adherence to secure coding guidelines and remediate complex security flaws
Stay current on emerging web application threats, exploit techniques, and iterations of the OWASP Top 10
Ensure application security controls comply with central, state, and international Data Protection Laws
Company mission
Information not specified

Core technologies

AWSAzure.NETGoogle Cloud Platform (GCP)

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field
Minimum 7+ years of dedicated hands-on experience in application security
Strong, hands-on software development experience with .NET/C# refactoring and remediation
In-depth understanding of web application vulnerabilities, remediation techniques, and the OWASP Top 10
Direct experience working with SAST, DAST, third-party penetration testing reports, and bug bounty management
Excellent problem-solving skills, analytical capabilities, and strong cross-functional communication and collaboration skills
Preferred: experience securing applications deployed in multi-cloud environments (e.g., AWS, GCP, Azure)
Preferred: knowledge of educational and data privacy frameworks, including FERPA, COPPA, GDPR, and SOC 2 standards
Preferred: professional security certifications such as CASE, GWAPT, GWEB, or Certified Ethical Hacker (CEH)
Must be a permanent resident of India, with current and continued residency within India required
.NET, C#, SAST, DAST, AWS, GCP, Azure
AWS
Azure
.NET
Google Cloud Platform (GCP)