Application Security Engineer

Location: Pune, India

Job Description
We are seeking an Application Security Engineer to support the security of customer-facing applications, cloud environments, and connected IoT solutions. This role will partner closely with application development teams to identify and remediate vulnerabilities, embed security throughout the software development lifecycle, and ensure applications are designed and deployed according to established security best practices.
The position will also provide support across governance, risk, and compliance activities, including customer security questionnaires, contract reviews, audits, and security inquiries. The ideal candidate will bring a strong foundation in application security with exposure to cloud security, security frameworks, and vulnerability management. Familiarity with IoT security and connected devices is a plus.
Skills and Requirements
Less than 8 years of professional experience in application security, security engineering, vulnerability management, penetration testing, or a related cybersecurity role.
Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience.
Hands-on experience with application security, vulnerability assessments, penetration testing, and vulnerability management.
Understanding of secure application development practices and common application vulnerabilities, including the OWASP Top 10.
Experience working with development teams to incorporate security throughout the SDLC.
Familiarity with cloud security concepts and architectures within Microsoft Azure and/or AWS.
Working knowledge of security and compliance frameworks such as NIST, ISO 27001, and SOC 2.
Strong analytical and problem-solving skills with the ability to identify, communicate, and help remediate security risks.
Strong written and verbal communication skills, including the ability to communicate security requirements to technical teams, business stakeholders, and customers.
Ability to manage multiple priorities and work effectively in a fast-paced environment.
Experience with application security testing tools such as Checkmarx, Veracode, Snyk, Burp Suite, SonarQube, or similar SAST/DAST/SCA technologies.
Foundational knowledge of IoT security, connected devices, firmware, industrial systems, or operational technology environments.
Experience with Python, PowerShell, or another scripting language.
Experience supporting SOC 2 or ISO 27001 audits, evidence collection, or customer security assessments.
Experience completing customer security questionnaires or participating in customer-facing security discussions.
Understanding of identity and access management, RBAC, authentication, and secure access controls.
Familiarity with security monitoring and risk analysis across cloud or IoT environments.
Security certifications such as Security+, GSEC, or similar credentials.
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to HR@insightglobal.com.