application security developer

Tata Consultancy Services (TCS)

<div></div><div><div><div><div><div>Job Title : Application Security Engineer
</div><div>Experience Required - 6+ Years</div><div><br>
</div>
<div></div><br>
<div>Application security Engineer is responsible for ensuring the security of software application by identifying vulnerabilities, assessing risks and collaborating with development team to implement effective security measures. This role requires strong knowledge of application security principles, threat modelling and secure coding practices. Candidate must be able to generate customized reporting and will be responsible for defect triaging, exception handling and sign off.</div><br>
<div><br>
</div><div>Must Have Technical/Functional Skills</div><br>
<div><br>
</div><ul><li> Proven experience in application security or secure software development
</li></ul><ul><li> Familiar with OWASP Top 10, NIST, ISO 27001 etc.
</li></ul><ul><li> Good understanding of secure coding practices
</li></ul><ul><li> Certifications like CEH, CISSP, OSCP</li></ul><br>
<div><br>
</div><div>Roles &amp; Responsibilities</div><br>
<div><br>
</div><ul><li> Conduct security assessments and code reviews of applications to identify vulnerabilities and recommend remediation strategies
</li></ul><ul><li> Penetration testing on web applications
</li></ul><ul><li> Perform static and dynamic application security testing (DAT/SAST/SCA) using automated tools and manual techniques
</li></ul><ul><li> Collaborate with development team to integrate best practices into the SDLC
</li></ul><ul><li> Analyze security threats and risk related to applications and advise on mitigation strategies
</li></ul><ul><li> Conduct security training to developers
</li></ul><ul><li> Participate in third party vendor assessments
</li></ul><ul><li> DevSecOps integration knowledge , process stabilization and process improvement strategizing and planning
</li></ul><ul><li> Proficiency in tools like Checkmarx, Snyk, Burp Suite, Veracode, Sonarqube, postman etc
</li></ul><ul><li> Conduct API and mobile app for both Android and iOS security testing
</li></ul><ul><li> Remediation support for vulnerabilities, if needed</li></ul><br>
<div><br>
</div><div>Salary Range - $100000 to $140000</div><div><br>
</div>
<div></div><br>
<div>TCS Employee Benefits Summary
</div>
<div></div><div>Discretionary Annual Incentive
</div><div>Comprehensive Medical Coverage Medical and Health, Dental &amp; Vision, Disability Planning &amp; Insurance, Pet Insurance Plans
</div><div>Family Support Maternal and Parental Leaves
</div><div>Insurance Options Auto and Home Insurance, Identity Theft Protection.
</div><div>Convenience and Professional Growth Commuter Benefits and Certification and Training Reimbursement.
</div><div>Time Off Vacation, Time Off, Sick Leave and Holidays.
</div><div>Legal and Financial Assistance Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.
</div></div></div></div><div><div><div><b>Location</b></div>
<div>Edison, NJ</div>
</div><div><div><b>Job Function</b></div>
<div>TECHNOLOGY</div>
</div><div><div><b>Role</b></div>
<div>Engineer</div>
</div><div><div><b>Job Id</b></div>
<div>399400</div>
</div><div><div><b>Desired Skills</b></div>
<div>Cyber Security</div>
</div><div><div><b>Salary Range</b></div>
<div>$100,000-$140,000 a year</div></div></div></div><div></div>

Application Security Engineer

<div></div><div><div><div><div><div>Job Title : Application Security Engineer
</div><div>Experience Required - 6+ Years</div><div><br>
</div>
<div></div><br>
<div>Application security Engineer is responsible for ensuring the security of software application by identifying vulnerabilities, assessing risks and collaborating with development team to implement effective security measures. This role requires strong knowledge of application security principles, threat modelling and secure coding practices. Candidate must be able to generate customized reporting and will be responsible for defect triaging, exception handling and sign off.</div><br>
<div><br>
</div><div>Must Have Technical/Functional Skills</div><br>
<div><br>
</div><ul><li> Proven experience in application security or secure software development
</li></ul><ul><li> Familiar with OWASP Top 10, NIST, ISO 27001 etc.
</li></ul><ul><li> Good understanding of secure coding practices
</li></ul><ul><li> Certifications like CEH, CISSP, OSCP</li></ul><br>
<div><br>
</div><div>Roles &amp; Responsibilities</div><br>
<div><br>
</div><ul><li> Conduct security assessments and code reviews of applications to identify vulnerabilities and recommend remediation strategies
</li></ul><ul><li> Penetration testing on web applications
</li></ul><ul><li> Perform static and dynamic application security testing (DAT/SAST/SCA) using automated tools and manual techniques
</li></ul><ul><li> Collaborate with development team to integrate best practices into the SDLC
</li></ul><ul><li> Analyze security threats and risk related to applications and advise on mitigation strategies
</li></ul><ul><li> Conduct security training to developers
</li></ul><ul><li> Participate in third party vendor assessments
</li></ul><ul><li> DevSecOps integration knowledge , process stabilization and process improvement strategizing and planning
</li></ul><ul><li> Proficiency in tools like Checkmarx, Snyk, Burp Suite, Veracode, Sonarqube, postman etc
</li></ul><ul><li> Conduct API and mobile app for both Android and iOS security testing
</li></ul><ul><li> Remediation support for vulnerabilities, if needed</li></ul><br>
<div><br>
</div><div>Salary Range - $100000 to $140000</div><div><br>
</div>
<div></div><br>
<div>TCS Employee Benefits Summary
</div>
<div></div><div>Discretionary Annual Incentive
</div><div>Comprehensive Medical Coverage Medical and Health, Dental &amp; Vision, Disability Planning &amp; Insurance, Pet Insurance Plans
</div><div>Family Support Maternal and Parental Leaves
</div><div>Insurance Options Auto and Home Insurance, Identity Theft Protection.
</div><div>Convenience and Professional Growth Commuter Benefits and Certification and Training Reimbursement.
</div><div>Time Off Vacation, Time Off, Sick Leave and Holidays.
</div><div>Legal and Financial Assistance Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.
</div></div></div></div><div><div><div><b>Location</b></div>
<div>Cabazon, CA</div>
</div><div><div><b>Job Function</b></div>
<div>TECHNOLOGY</div>
</div><div><div><b>Role</b></div>
<div>Engineer</div>
</div><div><div><b>Job Id</b></div>
<div>398078</div>
</div><div><div><b>Desired Skills</b></div>
<div>Cyber Security</div>
</div><div><div><b>Salary Range</b></div>
<div>$100,000-$140,000 a year</div></div></div></div><div></div>

KnitWell Group

<div><h2 class="jobSectionHeader"><b>About us</b></h2>
KnitWell Group, a specialty retail operating company, comprises some of the most iconic brands in America &ndash; Ann Taylor, Chico's, Haven Well Within, Lane Bryant, LOFT, Soma, Talbots, White House Black Market. Individually, our brands are unique and strong. Together, we are powerful.<br>
<p></p>
Our common thread is our commitment to create exceptional products, provide memorable experiences, and achieve superior results. Our associates are innovators who thrive through collaboration and are dedicated to excellence. At the heart of it all are the customers we serve. We are dedicated to creating fashion that not only looks good but also makes our customers feel good.<p></p><p><b><br>
Application Security Analyst</b></p><p></p><p><b>
About the role
</b></p><p>An application security analyst is a trained professional responsible for providing security assessments of applications and other software. The goal of these assessments is to protect organizations from hacking attempts and threats such as phishing, malware, and ransomware.</p><p>
Under the direction of the Director for Cyber Security Operations, the Application Security Analyst is responsible for the implementation and management of several security tools and integrations at the KnitWell Group. This includes integrations and automation related to DevSecOps, application vulnerability analysis, penetration testing and code analysis. The Application Security Analyst is always looking at ways to improve and recommend changes.</p><p>
The Application Security Analyst will use their strong knowledge and experience to advise and assist the organization on all related processes and projects. They will work with all other Engineers and application support teams, whether on prem or remote, and other IT partners to ensure that all in-house developed Web Applications and related components, processes are efficient, reduce risk within the organization, and enable associates to work effectively and securely.</p><p></p><p><b>
The impact you can have
</b></p><ul><li>Conduct application security assessments to identify and mitigate security risks</li><li>
Perform DAST scans for the internal and external applications.</li><li>
Conduct end-to-end Pentest engagement for E-commerce applications.</li><li>
Perform False positive analysis for vulnerabilities from scan results.</li><li>
Analyze the security risks and create vulnerability report with recommendations.</li><li>
Work collaboratively with cross-functional teams to identify and solve complex security problems.</li><li>
Work on ad hoc SAST scan requests and vulnerability analysis.</li><li>
Participate in incident response activities and provide technical guidance on security-related incidents</li><li>
Develop and maintain technical documentation related to application security</li></ul><p></p><p><b>
You&rsquo;ll bring to the role
</b></p><ul><li>Education and/or Certifications in Computer Science, Information Systems, other related field, or equivalent work experience.</li><li>
3-5+ years of IT work experience, with at least 2 years of experience working in Application security.</li></ul><ul><li>
Working experience with security testing tools (DAST, SAST, SCA).</li><li>
Hands on experience with manual web application penetration testing (VAPT).</li><li>
Proficient in Burp suite and Kali Linux tools.</li><li>
Experience on API testing.</li><li>
Knowledge of secure coding practices/frameworks such as OWASP, SSDF</li><li>
Strong knowledge of application security principles</li><li>
Knowledge on Threat Modeling and DevSecOps.</li><li>
Strong working knowledge of IT Security best practices</li><li>
Knowledge of policies and procedures; governance practices and control frameworks (ITIL); and regulatory obligations (SOX and PCI) as it relates to information systems.</li><li>
Familiarity with software development methodologies such as Agile or DevOps</li><li>
Knowledge in any one programming languages such as Java, Python, or C++</li><li>
Proficiency in some scripting languages (PowerShell, JavaScript, SQL, etc.)</li><li>
Understanding of various operating system platforms including Windows, UNIX, etc.</li><li>
Ability to interact with all levels of management.</li><li>
Must possess an understanding of the retail industry.</li><li>
Must possess an understanding eCommerce infrastructure.</li></ul><p></p><p><b>
Benefits</b></p><ul><li>
You will be eligible to receive a merchandise discount at select KnitWell Group brands, subject to each brand&rsquo;s discount policies.</li><li>
Support for your individual development plus opportunities for career mobility within our family of brands.
</li><li>A culture of giving back &ndash; local volunteer opportunities, annual donation and volunteer match to eligible nonprofit organizations, and philanthropic activities to support our communities.*
</li><li>Medical, dental, vision insurance &amp; 401(K).*</li><li>
Employee Assistance Program (EAP).</li><li>
Time off &ndash; paid time off &amp; holidays.*</li><li>
The target salary range for this role is: $100,000 &ndash; 115,000*</li></ul><p></p><ul><li>Any job offer will consider factors such your qualifications, relevant experience, and skills. Eligibility of certain benefits and associate programs are subject to employment type and role.</li></ul><p></p><p>
This position works remotely. Occasional travel to a company office may be required.</p><p></p><p>
Applicants to this position must be authorized to work for any employer in the US without sponsorship. We are not providing sponsorship for this position.</p><p></p><p>
#LI-MJ1</p><p></p><h2 class="jobSectionHeader"><b><br>
Location:</b></h2>
Corporate ascena &ndash; Remote<h2 class="jobSectionHeader"><b>
Position Type:</b></h2>
Regular/Full time<p></p><p><b><br>
Equal Employment Opportunity</b></p><p>
The Company is an equal opportunity employer and welcomes applications from diverse candidates. Hiring decisions are based upon a candidate's qualifications as they relate to the requirements of the position under consideration and are made without regard to sex (including pregnancy), race, color, national origin, religion, age, disability, genetic information, military status, sexual orientation, gender identity, or any other category protected by applicable law. The Company is committed to providing reasonable accommodations for job applicants with disabilities. If you require an accommodation to perform the essential duties of the position you are seeking or to participate in the application process, please contact myHRSupport@knitwellgroup.com. The Company will make reasonable accommodations for otherwise qualified applicants or employees, unless such accommodations would impose an undue hardship on the operations of the Company&rsquo;s business. The Company will not revoke or alter a job offer based on an applicant&rsquo;s request for reasonable accommodation.</p></div>

Application Security Analyst

DeepSource Technologies

<div><p><b>Role Overview</b></p><p>
The Database &amp; Application Security Engineer is responsible for protecting enterprise databases and applications through activity monitoring, data masking, file integrity monitoring, and compliance reporting, ensuring confidentiality, integrity, and regulatory compliance.</p><p></p><p>
Key Responsibilities</p><ul><li>Monitor database activity to detect suspicious queries, unauthorized access, and privilege escalations.</li><li>Configure, validate, and maintain data masking policies for non-production and test environments.</li><li>Implement and manage File Integrity Monitoring (FIM) for critical database and system files using Tripwire.</li><li>Investigate database-related security incidents and support remediation efforts.</li><li>Generate compliance and audit reports aligned with PCI DSS, GDPR, and NCA frameworks.</li><li>Deliver monthly reports on database security posture, risks, and compliance status.</li><li>Collaborate with application, infrastructure, and compliance teams to enhance data protection controls</li></ul><b><br>
Requirements</b><ul><li><br>
5+ years of experience in database and application security.</li><li>Hands-on experience with Imperva DAM, OpenText Data Masking, and Tripwire FIM (or equivalent tools).</li><li>Strong understanding of database technologies (Oracle, SQL Server, MySQL, etc.).</li><li>Knowledge of regulatory and compliance frameworks (PCI DSS, GDPR, NCA).</li><li>Experience in security monitoring, alert tuning, and reporting.</li><li>Strong analytical and documentation skills</li></ul></div>

Database & Application Security Engineer - Riyadh,KSA

McDonald's Global Office in India

<div>
 <p>
  <strong>
   About McDonald&rsquo;s:
  </strong>
 </p>
 <p>
  One of the world&rsquo;s largest employers with locations in more than 100 countries, McDonald&rsquo;s Corporation has corporate opportunities in Hyderabad. Our global offices serve as dynamic innovation and operations hubs, designed to expand McDonald's global talent base and in-house expertise. Our new office in Hyderabad will bring together knowledge across business, technology, analytics, and AI, accelerating our ability to deliver impactful solutions for the business and our customers across the globe.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Analyst, External Application &amp; API Security &ndash; E-WAAP
  </strong>
 </p>
 <ul>
  <li>
   Global Grade: G3
  </li>
  <li>
   Office Location: India
  </li>
  <li>
   Part Time / Full-Time: Full Time
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Company Description:
  </strong>
 </p>
 <p>
  McDonald&rsquo;s new growth strategy, Accelerating the Arches, is built on our ambition to Double Down on the 3Ds: Delivery, Digital, and Drive-Thru. Technology is at the center of this strategy, enabling 65M+ customers each day to enjoy fast, easy, and secure experiences across web, mobile, and restaurant channels.
 </p>
 <p>
  The Global Technology organization designs, builds, and operates the platforms behind our global omni-channel experience. Within Global Technology, Global Cybersecurity Services (GCS) protects McDonald&rsquo;s customers, crew, and brand by securing our digital ecosystem end-to-end.
 </p>
 <p>
  The External Web Application and API Protection (E-WAAP) team is responsible for securing McDonald&rsquo;s external web and API surfaces across web, mobile, and partner integrations using Akamai&rsquo;s edge security platform (WAF, bot management, DDoS, CDN, and API security).
 </p>
 <p>
  <strong>
   Job Description:
  </strong>
 </p>
 <p>
  The Analyst, Application &amp; API Security role is an entry-to-early-career position on the E-WAAP team. As an Analyst, you focus on monitoring, initial triage, staging validation, and operational support for Akamai security configurations, working closely with Engineers and Senior Engineers.
 </p>
 <p>
  This role is a strong starting point for a career in application security, platform engineering, or cloud security.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Responsibilities &amp; Accountabilities:
  </strong>
 </p>
 <p>
  <strong>
   Monitoring &amp; first-line triage:
  </strong>
 </p>
 <ul>
  <li>
   Monitor Akamai dashboards (Grafana), alerts, and logs for unusual traffic, errors, or performance issues impacting web or API properties.
  </li>
  <li>
   Perform first-line triage on alerts and tickets, gather context (affected application, timeframe, changes), and escalate to Engineers with clear summaries.
  </li>
  <li>
   Track incidents, changes, and requests in ServiceNow / Jira and ensure work items are correctly categorized and updated.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Staging &amp; Validation:
  </strong>
 </p>
 <ul>
  <li>
   Support staging configuration reviews by validating that URLs, headers, origins, and basic WAF / route behavior match expectations.
  </li>
  <li>
   Execute standard validation playbooks (e.g., test paths, error scenarios, status codes) and document results for Engineers.
  </li>
  <li>
   Assist with post-change and post-deployment validations in production to confirm no negative user impact.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Data Analysis &amp; Reporting:
  </strong>
 </p>
 <ul>
  <li>
   Collect and organize metrics related to WAF activity, attack trends, false positives, performance, and coverage; help prepare recurring reports.
  </li>
  <li>
   Perform basic log analysis using dashboards, queries, and filters to highlight spikes, notable patterns, or anomalies.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Documentation &amp; Process:
  </strong>
 </p>
 <ul>
  <li>
   Maintain and update Confluence pages, runbooks, and SOPs for common tasks (validation steps, intake requirements, escalation paths).
  </li>
  <li>
   Help improve onboarding and intake templates used by application teams when requesting E-WAAP services.
  </li>
  <li>
   Participate in Agile ceremonies to stay aligned on priorities and upcoming work, capturing action items and updating tickets.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Qualifications:
  </strong>
 </p>
 <p>
  <strong>
   Basic Qualifications:
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree in computer science, Information Technology, Engineering, or equivalent practical experience.
  </li>
  <li>
   2-5 years of relevant experience in IT operations, support, security, or a related internship / apprenticeship.
  </li>
  <li>
   Basic understanding of Linux or cloud environments and basic scripting (Python, Bash, PowerShell, or similar).
  </li>
  <li>
   Basic Understanding of HTTP, TLS, DNS, CDN, SDK concepts, and basic web development (HTML, JavaScript, APIs).
  </li>
  <li>
   Basic understanding of web technologies (HTTP, browsers, simple web application behavior) and an interest in security.
  </li>
  <li>
   Comfort working with dashboards, logs, and ticketing tools (e.g., ServiceNow, Jira).
  </li>
  <li>
   Strong attention to detail, curiosity to learn, and willingness to follow structured processes and documentation.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Preferred Qualifications:
  </strong>
 </p>
 <ul>
  <li>
   Exposure to any WAF / CDN platform (Akamai, Cloudflare, F5, etc.) through coursework, labs, internships, or self-learning.
  </li>
  <li>
   Experience using collaboration tools (Confluence, Jira, Teams) in a team environment.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Additional Information:
  </strong>
 </p>
 <p>
  McDonald&rsquo;s is committed to providing qualified individuals with reasonable accommodations to perform the essential functions of their jobs. Additionally, if you (or another applicant of whom you are aware) require assistance accessing or reading this job posting or otherwise seek assistance in the application process, please contact recruiting.supportteam@us.mcd.com
 </p>
 <p>
  McDonald&rsquo;s provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to sex, sex stereotyping, pregnancy (including pregnancy, childbirth, and medical conditions related to pregnancy, childbirth, or breastfeeding), race, color, religion, ancestry or national origin, age, disability status, medical condition, marital status, sexual orientation, gender, gender identity, gender expression, transgender status, protected military or veteran status, citizenship status, genetic information, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.
 </p>
 <p>
  Nothing in this job posting or description should be construed as an offer or guarantee of employment.
 </p>
</div>


Analyst, Application Security  [T500-23514]

SleekFocus

<p>We&rsquo;re Hiring: Package Specialist &ndash; SAP Application Security</p><p>Client: IBM</p><p>Locations: Bangalore | Pune | Chennai | Mumbai</p><p>Work Mode: On-site | Contract or Full-Time</p><p>Salary: ₹8&ndash;10 LPA</p><p>Duration: 12 Months</p><p>Required Skills</p><ul><li>SAP Security</li><li>GRC</li><li>HANA</li></ul><p>Must Have</p><p>* 3+ years experience</p><p>* At least 1 implementation in any of the following:</p><p>&ndash; SAP Security with CFIN</p><p>&ndash; SAP Security with GRC</p><p>&ndash; SAP Security S/4 Consultant</p><p>&ndash; SAP Security with IDM</p><p>&ndash; SAP Security Analyst</p><p>&ndash; SAP Security SF Consultant</p><p>&ndash; SAP Security HR Payroll</p><p>Eligibility: Bachelor&rsquo;s Degree</p><p>Last Date to Apply: 24 Feb 2026</p><p>Job Types: Full-time, Contractual / Temporary<br/>Contract length: 12 months</p><p>Pay: ₹800,000.00 - ₹1,000,000.00 per year</p><p>Benefits:</p><ul><li>Paid sick time</li><li>Provident Fund</li></ul><p>Education:</p><ul><li>Bachelor's (Required)</li></ul><p>Experience:</p><ul><li>SAP Security: 3 years (Required)</li><li>GRC: 3 years (Required)</li><li>Hana: 3 years (Required)</li></ul><p>Work Location: In person</p>

Package Specialist-SAP Application Security

Search 10000+ Application security developer jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 application security developer jobs Near Me

Application Security Engineer

Application Security Engineer

Application Security Analyst

Database & Application Security Engineer - Riyadh,KSA

Database & Application Security Engineer - Riyadh,KSA

Analyst, Application Security [T500-23514]

Package Specialist-SAP Application Security