Senior Application Security Engineer - India
Job description
The Senior Application Security Engineer identifies, triages, and remediates security vulnerabilities across Finalsite's web applications and proprietary software systems, working closely with development and QA teams. The role involves refactoring .NET/C# code, enforcing secure coding practices, and supporting compliance with data privacy laws.
At a glance
- Employment
- Full-time · Employee (employment agreement)
- Work mode
- Remote · India
What you'll do
- Conduct technical triage on security vulnerabilities identified across web applications via Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), penetration testing reports, and bug bounty programs
- Modify and refactor .NET/C# code to remediate identified security vulnerabilities in accordance with established risk prioritization schedules
- Develop, maintain, and enforce secure coding standards across development teams; implement reusable secure coding patterns (e.g., Object-Relational Mapping (ORM), output encoding frameworks) to catch vulnerabilities early in the software development life cycle
- Directly assist software developers with code reviews to verify adherence to secure coding guidelines and remediate complex security flaws
- Stay current on emerging web application threats, exploit techniques, and iterations of the OWASP Top 10
- Ensure application security controls comply with central, state, and international Data Protection Laws
What we're looking for
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field
- Minimum 7+ years of dedicated hands-on experience in application security
- Strong, hands-on software development experience with .NET/C# refactoring and remediation
- In-depth understanding of web application vulnerabilities, remediation techniques, and the OWASP Top 10
- Direct experience working with SAST, DAST, third-party penetration testing reports, and bug bounty management
- Excellent problem-solving skills, analytical capabilities, and strong cross-functional communication and collaboration skills
- Permanent residency in India, with current and continued residency required
Nice to have
- Experience securing applications deployed in multi-cloud environments (e.g., AWS, GCP, Azure)
- Knowledge of educational and data privacy frameworks, including FERPA, COPPA, GDPR, and SOC 2 standards
- Professional security certifications such as CASE, GWAPT, GWEB, or Certified Ethical Hacker (CEH)
Apply
About Finalsite
The preferred website, communications, enrollment, and marketing platform of more than 7,000 schools and school districts in 119 countries around the world
Finalsite is the preferred website, communications, enrollment, and marketing platform of more than 7,000 schools and school districts in 119 countries around the world. The company's people, products and services transform how schools connect and engage with their community, recruit students and staff, and fundraise; while managing the complex requirements around data privacy, accessibility, hosting and security. Finalsite products and services include award-winning website designs, a robust content management system, mass communications tools, a powerful enrollment management system, innovative inbound marketing tools, data integration, training, support and marketing consulting.
Mission
To build innovative solutions that elevate school engagement.
Key facts
- Glastonbury, CT, USA
- More than 7,000 schools and school districts in 119 countries use Finalsite
- Employees work remotely in nearly every state in the U.S. as well as Europe, South America, and Asia
- Products and services include website designs, a content management system, mass communications tools, an enrollment management system, inbound marketing tools, data integration, training, support and