Application Security Engineer

Job Title: Application Security Engineer

Experience Range: 5 8+ Years

Work Location: Remote, India

Job Type: Contract

We re hiring for one of the top IT services companies.
SPADTEK Solutions is proud to collaborate with leading IT organizations to source exceptional talent for their Contracts & full-time positions.
Client/Implementation Partner is a globally recognized IT services and consulting company, trusted by Fortune 500 clients and enterprises worldwide. With a strong presence across cloud, data engineering, AI, and digital transformation and is known for delivering cutting-edge solutions that drive business growth and innovation.
Working on enterprise-scale projects with global clients.
Exposure to next-gen technologies across cloud, data, and digital platforms.
A culture that values continuous learning, collaboration, and career growth.
Being part of a company consistently ranked among the top IT employers.
If you are an experienced professional seeking a long-term career opportunity with one of the industry s most respected names, this is your chance to join top IT services company through SPADTEK Solutions.

Key Responsibilities:

• Perform hands-on application security engineering, vulnerability analysis, and validation activities.
• Conduct secure code reviews for .NET, C#, APIs, and microservices.
• Partner closely with development teams to remediate vulnerabilities and promote secure coding practices.
• Support and enhance CI/CD security automation and operational security controls.
• Participate in application security architecture and design reviews throughout the SDLC.
• Assess security risks associated with AI and LLM-enabled applications.
• Identify and mitigate AI-specific threats including prompt injection, data leakage, and insecure plugin or tool integrations.
• Review and validate model input/output handling and sensitive data exposure controls.
• Evaluate third-party AI platforms, APIs, and integrations for security risks.
• Support AI governance initiatives, security policies, and guardrail implementation.
• Define and implement secure patterns for AI integration across enterprise applications.

Essential Skills:

• 5 8+ years of experience in Application Security and Secure Development.
• Proven hands-on engineering background with recent coding experience.
• Strong knowledge of OWASP Top 10 and Secure SDLC practices.
• Hands-on experience with SAST, SCA, DAST, and API security testing tools such as SonarQube, Black Duck, and Burp Suite.
• Expertise in code-level vulnerability triage, validation, and remediation.
• Strong development experience with .NET, C#, and Angular.
• Proficiency in PowerShell and Bash scripting and automation.
• Experience securing REST APIs and microservices-based architectures.
• Strong understanding of authentication and identity technologies including OAuth2, SAML, and Entra ID.
• Demonstrated ability to collaborate with development teams to analyze, prioritize, and remediate security vulnerabilities.
• Experience supporting security reviews and secure design practices throughout the software development lifecycle.

Good to Have Skills:

• Knowledge of MCP Servers, Agentic AI, and secure AI application frameworks.
• Experience with CI/CD security pipeline automation and security gate implementation.
• Container and platform security experience, preferably Kubernetes and OpenShift.
• Experience with CyberArk, Conjur, Vault, and enterprise secrets management solutions.
• Azure and Entra ID security expertise.
• Knowledge of RBAC, identity flows, certificate management, and credential handling.
• Experience with API security tools and penetration test validation workflows.
• Exposure to AI governance frameworks, policy enforcement, and AI threat modeling methodologies.
• Experience with Secure AI SDLC frameworks and automated security enforcement controls.
• Relevant certifications such as CSSLP, OSCP, GWAPT, or AI/Cloud Security certifications.