Application Security (AppSec) Engineer
- Location
- Pan India
- Salary
- Not specified
- Company
- Akash pawar
Job description
• Role & Company / Project Overview: VNC Digital Services Pvt Ltd is hiring a hands-on Application Security Engineer to strengthen application security, secure SDLC practices, vulnerability management, and emerging AI application security initiatives. The ideal candidate must possess strong coding experience and the ability to work directly with development teams on vulnerability analysis, validation, and remediation. • Key Responsibilities & Daily Duties: - Conduct secure code reviews across .NET applications, APIs, and microservices. - Perform hands-on vulnerability analysis, triage, and validation. - Partner directly with development teams to remediate security issues. - Support CI/CD security automation and security gates. - Participate in AppSec design reviews early in the SDLC. - Strengthen application security controls across traditional and AI-driven applications. • Required Qualifications, Skills & Experience: - 5–8+ years of experience in Application Security / Secure Development. - Strong knowledge of OWASP Top 10 and Secure SDLC practices. - Hands-on experience with SAST, SCA, API Security, and DAST tools (such as SonarQube, Black Duck, and Burp Suite). - Strong expertise in code-level vulnerability analysis, triage, validation, and remediation. - Recent hands-on coding experience in .NET / C# and Angular. - Experience securing REST APIs and microservices. - Strong knowledge of authentication protocols: OAuth2, SAML, and Entra ID. - Good scripting and automation skills using PowerShell and Bash. - Experience collaborating with developers to implement secure coding practices. - AI Application Security Expertise: • Assess security risks in AI/LLM-enabled applications. • Identify and mitigate prompt injection, LLM data leakage, and insecure plugin/tool integrations. • Review model input/output handling and sensitive data exposure controls. • Support implementation of AI guardrails, usage policies, and governance controls. • Evaluate third-party AI tools and APIs for security risks. • Define secure patterns for AI integration into applications. - Good-to-Have Skills: • Knowledge of MCP Servers and Agentic AI. • CI/CD security pipeline automation. • Container and platform security: OpenShift / Kubernetes. • Vault technologies: CyberArk / Conjur. • Azure / Entra ID, RBAC, identity flows, and secrets management. • Certificate and credential handling. • Enterprise AppSec programs, API security tools, and penetration-test validation workflows. • AI governance, secure AI SDLC, and AI threat modeling. • Ansible knowledge. • Certifications: CSSLP, OSCP, GWAPT, or AI/Cloud Security certifications. • Working Hours, Shifts & Location Details: - Work Mode: 100% Remote. - Target Candidate: Immediate joiners preferred. • Application Instructions: - Immediate joiners can submit their updated resumes to the recruiter email provided.