Sr. Engineer: Application Security
Concentrix3 days ago
Hyderābād, IndiaSenior
Responsibilities
- Launch and manage a formal Security Champions program, including advocate identification, advanced training, and community building.
- Integrate and maintain SAST, DAST, and SCA tools in CI/CD pipelines to provide rapid security feedback.
- Conduct manual and automated penetration tests and code reviews for web applications, APIs, and mobile applications.
- Partner with engineering teams on STRIDE and PASTA threat modeling during architecture and design.
- Triage application scan results, remove false positives, and create actionable Jira tickets.
- Create and deliver secure coding training based on the OWASP Top 10 and organizational technology stacks.
- Evaluate application security tools and reports, including StackHawk and Qualys WAS.
- Help develop application security standards and coding guidelines aligned with ASVS and NIST frameworks.
Requirements
- Bachelor’s degree in computer science, software engineering, information security, or equivalent experience.
- Significant software development or scripting experience with the ability to read and understand secured code.
- Deep knowledge of the OWASP Top 10, SANS 25, SQL injection, cross-site scripting, CSRF, IDOR, and remediation techniques.
- Hands-on experience integrating security tools into Azure DevOps, GitHub Actions, or Jenkins pipelines.
- Experience with SAST, DAST, and SCA tools.
- Experience building relationships with development teams or leading Security Champions initiatives.
- Strong understanding of API security, JSON Web Tokens, and API gateways.
- Familiarity with securing cloud-native applications involving containers, Kubernetes, serverless systems, AWS, or Azure.
- Ability to explain complex security issues to non-security audiences and influence stakeholders.
- Preferred certifications include CASE, CSSLP, GWEB, or OSCP.
- Preferred experience includes Qualys Web App Scanning, infrastructure-as-code security scanning with Terraform or Ansible, and contributions to open-source security projects or bug bounty programs.
Tech Stack
Categories
About Concentrix
We’re Concentrix, a Fortune 500® technology and services leader, helping the world's best brands cut through AI hype and create intelligent operations that perform in the real world. We design, build, and run integrated human and AI solutions, harnessing the insight from billions of real-world interactions to help 2000+ of the world’s most complex organizations solve their toughest business challenges. Backed by 20+ years of operational experience and battle tested AI, we’re the Intelligent Transformation Partner that helps clients across every major vertical move from AI ambition to measurable, scalable performance.