Application Security Engineer / Analyst

Core Responsibilities: Perform Web Application and API Security testing aligned with OWASP Top 10 using tools such as Burp Suite, Postman, and Tenable Nessus. Conduct Secure Code Reviews (manual and SAST-based) to identify vulnerabilities in source code and recommend remediation steps. Integrate and validate security controls within CI/CD pipelines for continuous testing and compliance. Assess application, microservice, and infrastructure security gaps, and support teams with remediation planning. Define and review hardening standards, TLS configurations, and integration security controls. Collaborate with developers, architects, and DevOps teams to embed “Shift Left” security practices during SDLC stages. Document findings, prepare detailed security assessment reports, and assist in mitigation validation. Stay updated with emerging threats, vulnerabilities, and security best practices to strengthen product security posture.