application security specialist

SleekFocus

<p>We&rsquo;re Hiring: Package Specialist &ndash; SAP Application Security</p><p>Client: IBM</p><p>Locations: Bangalore | Pune | Chennai | Mumbai</p><p>Work Mode: On-site | Contract or Full-Time</p><p>Salary: ₹8&ndash;10 LPA</p><p>Duration: 12 Months</p><p>Required Skills</p><ul><li>SAP Security</li><li>GRC</li><li>HANA</li></ul><p>Must Have</p><p>* 3+ years experience</p><p>* At least 1 implementation in any of the following:</p><p>&ndash; SAP Security with CFIN</p><p>&ndash; SAP Security with GRC</p><p>&ndash; SAP Security S/4 Consultant</p><p>&ndash; SAP Security with IDM</p><p>&ndash; SAP Security Analyst</p><p>&ndash; SAP Security SF Consultant</p><p>&ndash; SAP Security HR Payroll</p><p>Eligibility: Bachelor&rsquo;s Degree</p><p>Last Date to Apply: 24 Feb 2026</p><p>Job Types: Full-time, Contractual / Temporary<br/>Contract length: 12 months</p><p>Pay: ₹800,000.00 - ₹1,000,000.00 per year</p><p>Benefits:</p><ul><li>Paid sick time</li><li>Provident Fund</li></ul><p>Education:</p><ul><li>Bachelor's (Required)</li></ul><p>Experience:</p><ul><li>SAP Security: 3 years (Required)</li><li>GRC: 3 years (Required)</li><li>Hana: 3 years (Required)</li></ul><p>Work Location: In person</p>

Package Specialist-SAP Application Security

Tata Consultancy Services (TCS)

<div></div><div><div><div><div><div>Job Title : Application Security Engineer
</div><div>Experience Required - 6+ Years</div><div><br>
</div>
<div></div><br>
<div>Application security Engineer is responsible for ensuring the security of software application by identifying vulnerabilities, assessing risks and collaborating with development team to implement effective security measures. This role requires strong knowledge of application security principles, threat modelling and secure coding practices. Candidate must be able to generate customized reporting and will be responsible for defect triaging, exception handling and sign off.</div><br>
<div><br>
</div><div>Must Have Technical/Functional Skills</div><br>
<div><br>
</div><ul><li> Proven experience in application security or secure software development
</li></ul><ul><li> Familiar with OWASP Top 10, NIST, ISO 27001 etc.
</li></ul><ul><li> Good understanding of secure coding practices
</li></ul><ul><li> Certifications like CEH, CISSP, OSCP</li></ul><br>
<div><br>
</div><div>Roles &amp; Responsibilities</div><br>
<div><br>
</div><ul><li> Conduct security assessments and code reviews of applications to identify vulnerabilities and recommend remediation strategies
</li></ul><ul><li> Penetration testing on web applications
</li></ul><ul><li> Perform static and dynamic application security testing (DAT/SAST/SCA) using automated tools and manual techniques
</li></ul><ul><li> Collaborate with development team to integrate best practices into the SDLC
</li></ul><ul><li> Analyze security threats and risk related to applications and advise on mitigation strategies
</li></ul><ul><li> Conduct security training to developers
</li></ul><ul><li> Participate in third party vendor assessments
</li></ul><ul><li> DevSecOps integration knowledge , process stabilization and process improvement strategizing and planning
</li></ul><ul><li> Proficiency in tools like Checkmarx, Snyk, Burp Suite, Veracode, Sonarqube, postman etc
</li></ul><ul><li> Conduct API and mobile app for both Android and iOS security testing
</li></ul><ul><li> Remediation support for vulnerabilities, if needed</li></ul><br>
<div><br>
</div><div>Salary Range - $100000 to $140000</div><div><br>
</div>
<div></div><br>
<div>TCS Employee Benefits Summary
</div>
<div></div><div>Discretionary Annual Incentive
</div><div>Comprehensive Medical Coverage Medical and Health, Dental &amp; Vision, Disability Planning &amp; Insurance, Pet Insurance Plans
</div><div>Family Support Maternal and Parental Leaves
</div><div>Insurance Options Auto and Home Insurance, Identity Theft Protection.
</div><div>Convenience and Professional Growth Commuter Benefits and Certification and Training Reimbursement.
</div><div>Time Off Vacation, Time Off, Sick Leave and Holidays.
</div><div>Legal and Financial Assistance Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.
</div></div></div></div><div><div><div><b>Location</b></div>
<div>Edison, NJ</div>
</div><div><div><b>Job Function</b></div>
<div>TECHNOLOGY</div>
</div><div><div><b>Role</b></div>
<div>Engineer</div>
</div><div><div><b>Job Id</b></div>
<div>399400</div>
</div><div><div><b>Desired Skills</b></div>
<div>Cyber Security</div>
</div><div><div><b>Salary Range</b></div>
<div>$100,000-$140,000 a year</div></div></div></div><div></div>

Application Security Engineer

<div></div><div><div><div><div><div>Job Title : Application Security Engineer
</div><div>Experience Required - 6+ Years</div><div><br>
</div>
<div></div><br>
<div>Application security Engineer is responsible for ensuring the security of software application by identifying vulnerabilities, assessing risks and collaborating with development team to implement effective security measures. This role requires strong knowledge of application security principles, threat modelling and secure coding practices. Candidate must be able to generate customized reporting and will be responsible for defect triaging, exception handling and sign off.</div><br>
<div><br>
</div><div>Must Have Technical/Functional Skills</div><br>
<div><br>
</div><ul><li> Proven experience in application security or secure software development
</li></ul><ul><li> Familiar with OWASP Top 10, NIST, ISO 27001 etc.
</li></ul><ul><li> Good understanding of secure coding practices
</li></ul><ul><li> Certifications like CEH, CISSP, OSCP</li></ul><br>
<div><br>
</div><div>Roles &amp; Responsibilities</div><br>
<div><br>
</div><ul><li> Conduct security assessments and code reviews of applications to identify vulnerabilities and recommend remediation strategies
</li></ul><ul><li> Penetration testing on web applications
</li></ul><ul><li> Perform static and dynamic application security testing (DAT/SAST/SCA) using automated tools and manual techniques
</li></ul><ul><li> Collaborate with development team to integrate best practices into the SDLC
</li></ul><ul><li> Analyze security threats and risk related to applications and advise on mitigation strategies
</li></ul><ul><li> Conduct security training to developers
</li></ul><ul><li> Participate in third party vendor assessments
</li></ul><ul><li> DevSecOps integration knowledge , process stabilization and process improvement strategizing and planning
</li></ul><ul><li> Proficiency in tools like Checkmarx, Snyk, Burp Suite, Veracode, Sonarqube, postman etc
</li></ul><ul><li> Conduct API and mobile app for both Android and iOS security testing
</li></ul><ul><li> Remediation support for vulnerabilities, if needed</li></ul><br>
<div><br>
</div><div>Salary Range - $100000 to $140000</div><div><br>
</div>
<div></div><br>
<div>TCS Employee Benefits Summary
</div>
<div></div><div>Discretionary Annual Incentive
</div><div>Comprehensive Medical Coverage Medical and Health, Dental &amp; Vision, Disability Planning &amp; Insurance, Pet Insurance Plans
</div><div>Family Support Maternal and Parental Leaves
</div><div>Insurance Options Auto and Home Insurance, Identity Theft Protection.
</div><div>Convenience and Professional Growth Commuter Benefits and Certification and Training Reimbursement.
</div><div>Time Off Vacation, Time Off, Sick Leave and Holidays.
</div><div>Legal and Financial Assistance Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.
</div></div></div></div><div><div><div><b>Location</b></div>
<div>Cabazon, CA</div>
</div><div><div><b>Job Function</b></div>
<div>TECHNOLOGY</div>
</div><div><div><b>Role</b></div>
<div>Engineer</div>
</div><div><div><b>Job Id</b></div>
<div>398078</div>
</div><div><div><b>Desired Skills</b></div>
<div>Cyber Security</div>
</div><div><div><b>Salary Range</b></div>
<div>$100,000-$140,000 a year</div></div></div></div><div></div>

Chenega Corporation

<div>Overview:
<div>
The<b> Admin Security Specialist </b>performs identification issuance administrative functions requiring a high degree of attention to detail, confidentiality and skill in various clerical areas and computer usage<b>.</b></div>
Responsibilities:
<ul><li>Ensure that registrants are processed without any undue delays in accordance with the Standard Operating Procedure (SOP) or as may be established by supervisors.</li><li>
Must be able to work flexible hours to include weekends and holidays if needed.</li><li>
As a critical position will be required to report and remain available for emergency duty in expectation of a declared emergency.</li><li>
Other duties as assigned.</li></ul>
Qualifications:
<ul><li>High school diploma or GED.</li><li>
Two years of security, administrative, secretarial and/or badging experience</li><li>
Must be able to obtain a DoD security clearance, but not required to start.
</li><li>All Identity Credential and Access Management (ICAM) related training required prior to appointment.</li><li>
NASA LENEL Identity Management System training prior to appointment</li><li>
IdMAX System training prior to appointment.</li></ul>
Teleworking Permitted?: false</div>

Admin Security Specialist

METRO Global Solution Center IN

<div><b>Company Description</b><p><b><br>
About us:</b></p><p>
Metro Global Solution Center (MGSC) is internal solution partner for METRO, a &euro;31.6 Billion international wholesaler with operations in 32 countries through 625 stores &amp; a team of 85,000 people globally. Metro operates in a further 10 countries with its Food Service Distribution (FSD) business and it is thus active in a total of 34 countries.</p><p>
MGSC, location wise is present in Pune (India), D&uuml;sseldorf (Germany) and Szczecin (Poland). We provide HR, Finance, IT &amp; Business operations support to 31 countries, speak 24+ languages and process over 18,000 transactions a day. We are setting tomorrow&rsquo;s standards for customer focus, digital solutions, and sustainable business models. For over 10 years, we have been providing services and solutions from our two locations in Pune and Szczecin. This has allowed us to gain extensive experience in how we can best serve our internal customers with high quality and passion. We believe that we can add value, drive efficiency, and satisfy our customers.</p><p>
Website: https://www.metro-gsc.in<br>
Company Size: 1050-1100<br>
Headquarters: Pune, Maharashtra, India<br>
Type: Privately Held<br>
Inception: 2011</p><b><br>
Job Description</b><br>
<ul><li>
Embed application security controls into CI/CD pipelines to provide accurate, actionable, and timely feedback to engineers.</li><li>
Support the investigation, remediation, and validation of application security findings including the management of exceptions and false positives.</li><li>
Conduct targeted code reviews in partnership with engineers and platform teams to identify security issues early and improve coding practices</li><li>
Implement and maintain security controls, integrations, and automations required to ensure security and privacy by default across applications and their APIs.</li><li>
Perform threat modeling exercises to identify abuse cases, threat actors, and appropriate preventative and detective controls</li><li>
Participate actively in the engineer community led by METRO Corporate Information Security to define best practices, align way-of-working, prioritize and execute on the needed activities across application and API platforms.</li></ul><br>
<b>
Qualifications</b><p><br>
Security experience in one, or more of the following:</p><ul><li>
Application security experience identifying, investigating, and remediating vulnerabilities across all stages of the SDLC.</li><li>
Hands on experience writing and reviewing code and contributing to developer workflows such as design reviews, planning, and implementation.</li><li>
Proven experience designing, implementing, and improving security tooling and CI/CD integrations, with focus on reducing noise and prioritizing risk.</li><li>
Strong focus on developer experience with the ability to communicate security issues clearly.</li><li>
Familiarity with application architectures, including monolithic and microservice based designs.</li><li><b>
Solid understanding of frameworks such as OWASP Top 10, SAMM, ASVS, and FIRST principles</b></li><li><b>
Comfort working across one or more programming languages such as Java, C++, Python, JavaScript or similar</b>.</li></ul><p>
And:</p><ul><li><b>
Experience with LLMs, AI, and agentic coding platforms such as Github Co-pilot, Gemini, or Claude Code.</b></li><li>
Proven experience as a security subject-matter expert, mentoring and raising awareness to security mandates.</li></ul></div>

DevSecOps Engineer

YUM! Brands, Inc.

<div><p><div><div><div><p>Responsibilities</p><div><ul><li>Partner with US teams to provide security guidance as a subject matter expert around application security and operate YUM! application security services for the brand.</li><li>Aligning with a risk-based approach, collaborate with third-party engineers, and product owners to identify, prioritize, and remediate vulnerabilities in mobile and web applications across YUM! systems. These include e-commerce websites, e-commerce mobile apps, and restaurant operations apps.</li><li>Leveraging established YUM! security services, review vulnerability scanner reports/results and work with application and/or engineering teams to communicate and address/remediate issues. This includes ensuring adherence to established remediation timelines, including recommending and monitoring remediation activities.</li><li>Maintain the brand&rsquo;s application security scan profiles and scan policies as per baseline standards across scanning tools for containers, SAST, DAST, and crowd sourced pen testing. This will include reviewing findings of security scans and onboarding new applications into scanning tools or services.</li><li>Conduct awareness campaigns with engineering teams to ensure application development adheres to YUM! Global Technology Risk Management development standards.</li><li>Continuously monitor published vulnerabilities for various applications, operating systems, and databases. Based on the publicly disclosed vulnerabilities determine the remediation priority and engage the stakeholders. Review the solution by re-scanning the disclosed vulnerabilities. (Familiar with OWASP Top 10, etc.)</li><li>Conduct threat modeling exercises to identify potential risks at the design and architecture stages and provide guidance to development teams in secure design and best practices.</li><li>Coordinate with incident response teams to contain, remediate, and perform root cause analysis on security incidents affecting applications.</li></ul><br>
Minimum Requirements:<br>
<ul><li>Bachelor's degree and at least 4 years of experience in cybersecurity and/or software development. Additional years of relevant cybersecurity or development experience may be considered in lieu of bachelor's degree.</li><li>Experience with reviewing application cybersecurity vulnerabilities for risk and relevance as well as in vulnerability mitigations/remediation planning, for identified vulnerabilities</li><li>Able to successfully communicate with technical personnel and third parties.</li><li>Knowledge of continuous integration and continuous delivery platforms</li><li>Familiarity with relevant compliance and data privacy regulations (e.g. PCI DSS, GDPR, CCPA) and how they impact application security with the ability to incorporate compliance requirements into security testing and remediation processes.</li><li>Knowledge of common programming languages and paradigms ( OOP, functional, concurrent, etc)</li></ul></div></div></div><div></div><div><div><p><b><br>
Preferred Requirements</b></p><div><ul><li>Knowledge of cloud environment topics including secrets management, infrastructure as code, and serverless technologies</li><li>Knowledge of CI/CD techniques and build/deployment pipeline technologies</li><li>Knowledge of application scanning tools using both dynamic and static techniques</li><li>Knowledge of containers and container management tools (e.g. Docker, Kubernetes) including how to interpret and remediate security findings and best practices for securing container images and deployments.</li><li>Knowledge of HTTP communication</li><li>Knowledge of package management tools for languages and operating systems (e.g. npm, pip, apt, yum)</li></ul></div></div></div></div></p><p><br>
BTECH - Computer Science / Information Technology</p></div>

Security Engineer II

KnitWell Group

<div><h2 class="jobSectionHeader"><b>About us</b></h2>
KnitWell Group, a specialty retail operating company, comprises some of the most iconic brands in America &ndash; Ann Taylor, Chico's, Haven Well Within, Lane Bryant, LOFT, Soma, Talbots, White House Black Market. Individually, our brands are unique and strong. Together, we are powerful.<br>
<p></p>
Our common thread is our commitment to create exceptional products, provide memorable experiences, and achieve superior results. Our associates are innovators who thrive through collaboration and are dedicated to excellence. At the heart of it all are the customers we serve. We are dedicated to creating fashion that not only looks good but also makes our customers feel good.<p></p><p><b><br>
Application Security Analyst</b></p><p></p><p><b>
About the role
</b></p><p>An application security analyst is a trained professional responsible for providing security assessments of applications and other software. The goal of these assessments is to protect organizations from hacking attempts and threats such as phishing, malware, and ransomware.</p><p>
Under the direction of the Director for Cyber Security Operations, the Application Security Analyst is responsible for the implementation and management of several security tools and integrations at the KnitWell Group. This includes integrations and automation related to DevSecOps, application vulnerability analysis, penetration testing and code analysis. The Application Security Analyst is always looking at ways to improve and recommend changes.</p><p>
The Application Security Analyst will use their strong knowledge and experience to advise and assist the organization on all related processes and projects. They will work with all other Engineers and application support teams, whether on prem or remote, and other IT partners to ensure that all in-house developed Web Applications and related components, processes are efficient, reduce risk within the organization, and enable associates to work effectively and securely.</p><p></p><p><b>
The impact you can have
</b></p><ul><li>Conduct application security assessments to identify and mitigate security risks</li><li>
Perform DAST scans for the internal and external applications.</li><li>
Conduct end-to-end Pentest engagement for E-commerce applications.</li><li>
Perform False positive analysis for vulnerabilities from scan results.</li><li>
Analyze the security risks and create vulnerability report with recommendations.</li><li>
Work collaboratively with cross-functional teams to identify and solve complex security problems.</li><li>
Work on ad hoc SAST scan requests and vulnerability analysis.</li><li>
Participate in incident response activities and provide technical guidance on security-related incidents</li><li>
Develop and maintain technical documentation related to application security</li></ul><p></p><p><b>
You&rsquo;ll bring to the role
</b></p><ul><li>Education and/or Certifications in Computer Science, Information Systems, other related field, or equivalent work experience.</li><li>
3-5+ years of IT work experience, with at least 2 years of experience working in Application security.</li></ul><ul><li>
Working experience with security testing tools (DAST, SAST, SCA).</li><li>
Hands on experience with manual web application penetration testing (VAPT).</li><li>
Proficient in Burp suite and Kali Linux tools.</li><li>
Experience on API testing.</li><li>
Knowledge of secure coding practices/frameworks such as OWASP, SSDF</li><li>
Strong knowledge of application security principles</li><li>
Knowledge on Threat Modeling and DevSecOps.</li><li>
Strong working knowledge of IT Security best practices</li><li>
Knowledge of policies and procedures; governance practices and control frameworks (ITIL); and regulatory obligations (SOX and PCI) as it relates to information systems.</li><li>
Familiarity with software development methodologies such as Agile or DevOps</li><li>
Knowledge in any one programming languages such as Java, Python, or C++</li><li>
Proficiency in some scripting languages (PowerShell, JavaScript, SQL, etc.)</li><li>
Understanding of various operating system platforms including Windows, UNIX, etc.</li><li>
Ability to interact with all levels of management.</li><li>
Must possess an understanding of the retail industry.</li><li>
Must possess an understanding eCommerce infrastructure.</li></ul><p></p><p><b>
Benefits</b></p><ul><li>
You will be eligible to receive a merchandise discount at select KnitWell Group brands, subject to each brand&rsquo;s discount policies.</li><li>
Support for your individual development plus opportunities for career mobility within our family of brands.
</li><li>A culture of giving back &ndash; local volunteer opportunities, annual donation and volunteer match to eligible nonprofit organizations, and philanthropic activities to support our communities.*
</li><li>Medical, dental, vision insurance &amp; 401(K).*</li><li>
Employee Assistance Program (EAP).</li><li>
Time off &ndash; paid time off &amp; holidays.*</li><li>
The target salary range for this role is: $100,000 &ndash; 115,000*</li></ul><p></p><ul><li>Any job offer will consider factors such your qualifications, relevant experience, and skills. Eligibility of certain benefits and associate programs are subject to employment type and role.</li></ul><p></p><p>
This position works remotely. Occasional travel to a company office may be required.</p><p></p><p>
Applicants to this position must be authorized to work for any employer in the US without sponsorship. We are not providing sponsorship for this position.</p><p></p><p>
#LI-MJ1</p><p></p><h2 class="jobSectionHeader"><b><br>
Location:</b></h2>
Corporate ascena &ndash; Remote<h2 class="jobSectionHeader"><b>
Position Type:</b></h2>
Regular/Full time<p></p><p><b><br>
Equal Employment Opportunity</b></p><p>
The Company is an equal opportunity employer and welcomes applications from diverse candidates. Hiring decisions are based upon a candidate's qualifications as they relate to the requirements of the position under consideration and are made without regard to sex (including pregnancy), race, color, national origin, religion, age, disability, genetic information, military status, sexual orientation, gender identity, or any other category protected by applicable law. The Company is committed to providing reasonable accommodations for job applicants with disabilities. If you require an accommodation to perform the essential duties of the position you are seeking or to participate in the application process, please contact myHRSupport@knitwellgroup.com. The Company will make reasonable accommodations for otherwise qualified applicants or employees, unless such accommodations would impose an undue hardship on the operations of the Company&rsquo;s business. The Company will not revoke or alter a job offer based on an applicant&rsquo;s request for reasonable accommodation.</p></div>

Application Security Analyst

Search 10000+ Application security specialist jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 application security specialist jobs Near Me

Package Specialist-SAP Application Security

Application Security Engineer

Application Security Engineer

Admin Security Specialist

DevSecOps Engineer

Security Engineer II

Application Security Analyst