Senior Application Security Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Application Security Engineer based in India.

• Lead threat modeling for critical application areas, including authentication and session management, privilege escalation, integrations, tenant isolation, cryptography, and secrets management.
• Define security requirements early in the architecture and development process.
• Assess security risks and provide clear recommendations to product and engineering leadership.
• Contribute directly to product repositories by reviewing and implementing security fixes, dependency updates, and code-level remediation.
• Own and improve static application security testing, dynamic testing, dependency scanning, and related security tooling.
• Tune security tools to improve signal quality.
• Promote secure coding practices across large C#/.NET and Java codebases.
• Establish appropriate security review practices for AI-assisted software development.
• Lead product vulnerability response from intake through triage, remediation, coordinated disclosure, CVE management, and customer-facing security advisories.
• Analyze penetration-testing and bug-bounty findings to identify recurring weaknesses.
• Own software composition analysis and SBOM generation.
• Maintain security evidence that can support customer questionnaires, security reviews, certifications, and other assurance activities.
• Collaborate with engineering, product, legal, and other stakeholders.

• 6+ years of experience in software engineering or security, including at least 3 years focused on application or product security.
• Demonstrated application security experience with products that customers deploy and operate within their own environments.
• Strong production-level programming skills in C# and .NET, with sufficient experience in Java.
• Recent hands-on experience with AI-assisted development or AI-enabled security tooling.
• Strong understanding of threat modeling.
• Experience with static analysis, dynamic application testing, software composition analysis, dependency scanning, and security tooling optimization.
• Knowledge of identity and authentication technologies and protocols such as OAuth, OIDC, SAML, and SCIM.
• Experience with coordinated vulnerability disclosure, vulnerability triage, CVE processes, and customer-facing security advisories.
• Strong secure code review capabilities across web applications and APIs.
• Understanding of software supply-chain security, SBOM standards, dependency management, and license compliance.
• Experience with cryptographic reviews, security champion programs, PCI DSS, FedRAMP, or similar security frameworks is advantageous.
• Ability to communicate complex security risks clearly.
• Strong analytical and problem-solving skills.

• Remote working opportunity based in India.
• Senior-level ownership across multiple product lines and application security initiatives.
• Direct collaboration with engineering and product leadership.
• Opportunity to influence security architecture, secure development practices, and vulnerability management at scale.
• Hands-on exposure to modern application security, AI-assisted development, software supply-chain security, and cloud-hosted products.
• Globally distributed and collaborative working environment.
• Opportunities for professional development, learning, and career growth.
• Employee-focused health and wellbeing programs.
• Inclusive and equal-opportunity workplace.