Job Description
We are looking for an Application Security Engineer to help us build, test, and harden secure systems across our products and infrastructure. If you think like an attacker but build like a defender, this role is for you.
Role: Application Security Engineer
Experience Required: 35 years
Location: Pune (Work from Office)
Work Days: Monday–Friday + Alternate Saturdays | 10:00 AM – 7:00 PM
Qualifications:
Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field
3–5 years of experience in Application Security / Ethical Hacking / Penetration Testing
Relevant certifications preferred: CEH, OSCP, CompTIA Security+, or equivalent
Solid understanding of OWASP Top 10, secure coding principles, and common application vulnerabilities
Prior experience working closely with development teams in a Secure SDLC environment
Key Responsibilities:
Perform penetration testing and vulnerability assessments on web applications, APIs, and mobile platforms
Conduct secure code reviews and work with developers to fix vulnerabilities early in the SDLC
Define and enforce application security standards, hardening guidelines, and secure configuration baselines
Carry out threat modeling for new features and major architectural changes
Manage vulnerability disclosure, patching cycles, and risk remediation timelines
Monitor for emerging threats, CVEs, and attack techniques relevant to our tech stack
Collaborate with DevOps/Cloud teams to secure CI/CD pipelines and cloud infrastructure
Support incident response efforts when security issues are identified
Document findings, risk ratings, and remediation guidance clearly for both technical and non-technical stakeholders
Required Skills:
Strong hands-on experience in Ethical Hacking / Penetration Testing (OWASP Top 10, API security, authentication/authorization flaws)
Practical knowledge of secure coding practices across at least one major stack (e.g., Node.js, Java, Python, .NET)
Experience with security tools: Burp Suite, OWASP ZAP, Nmap, Metasploit, or similar
Understanding of Secure SDLC and how to embed security checkpoints into development workflows
Vulnerability Assessment & Risk Management experience
Familiarity with cloud security fundamentals (AWS, Azure, or GCP)
Good to Have:
Exposure to ISO 27001 or other compliance/governance frameworks
Experience securing CI/CD pipelines or container environments (Docker/Kubernetes)
Interested candidates can share their resumes at hr@bylinelearning.com or connect with us at 8421142637