Application Security Engineer (Cybersecurity)

TL;DR

Application Security Engineer (Cybersecurity): Ensuring the security of hirify.global's technology stack by managing vulnerabilities and integrating security tools into the CI/CD pipeline with an accent on vulnerability management and secure coding practices. Focus on developing automated security tests and fostering a security-first culture within engineering teams.

Location: Hybrid (3 days a week in our Bangalore office)

Company

hirify.global is a Work AI platform that helps organizations work smarter with AI, providing a secure and open ecosystem for enterprise search and AI integration.

What you will do

• Implement and improve the vulnerability management lifecycle.
• Continuously scan, monitor, and patch OSS dependencies.
• Integrate SAST, DAST, and dependency scanning tools into the CI/CD pipeline.
• Define best practices for secure coding.
• Conduct secure code reviews and penetration testing.
• Provide security guidance and mentorship to engineering teams.

Requirements

• 5+ years of experience in application security and vulnerability management.
• Deep understanding of software security vulnerabilities and OWASP Top 10.
• Experience with SAST, DAST, and vulnerability management tools.
• Coding experience in languages such as Go, Python, Java, or C++.
• Hands-on experience with cloud-native security best practices.
• Strong proactive approach to security.