application security specialist

Openkyber

<div><p>Security Certificate Management No 5-10 Years Is Required Security Testing No 5-10 Years Is Required Security Vulnerablity Analysis No 5-10 Years Is Required Web Application Security No 5-10 Years Is Required Web Application Security and Cryptography No 5-10 Years Is Required Network Security No 5-10 Years Is Required Information Management and Security No 5-10 Years Is Required AWS Security Architect No At least 1 year Nice To Have DB Security No At least 1 year Nice To Have File Vault/Storage Management &amp; Security Management No 2-5 Years Is Required Information Management &amp; Security No NA Nice To Have</p>
<p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

OCI Storage Engineer

Vanguard

<div><div>Provides advanced application and product security expertise by designing, developing, and integrating security features into systems, applications, and solutions. Ensures product security is maintained throughout the product lifecycle by embedding security controls, performing security assessments, and integrating new security features and updates into existing products. Works under general direction and serves as a technical partner to product and engineering teams to strengthen security posture while enabling business objectives.</div><div><p>
Core Responsibilities</p><p></p><ul><li>Design, implement, test, and maintain application security tooling and integrations across the software development lifecycle, with a focus on reliability, scalability, and performance.</li><li>Build, enhance, and operate CI/CD pipeline integrations for application security scanning, ensuring consistent execution and minimal impact to developer workflows.</li><li>Develop and maintain monitoring, alerting, and operational controls for application security platforms to ensure availability and rapid detection of failures.</li><li>Participate in an on-call rotation, troubleshoot and resolve production issues related to application security tooling, perform root cause analysis, and implement preventative improvements.</li><li>Collaborate closely with other Application Security engineers, platform teams, and the CTO organization to integrate new and existing security tools into enterprise development platforms.</li><li>Partner with Security Specialists to implement and maintain application security tool integrations and workflows, translating program requirements into reliable engineering solutions (e.g., pipeline steps, configurations, connectors, automation, and operational runbooks).</li><li>Continuously improve application security engineering standards, tooling architecture, and technical patterns, identifying opportunities to modernize or simplify implementations.</li><li>Identify and implement automation opportunities to reduce manual effort, improve consistency, and scale application security capabilities.</li><li>Maintain a strong working knowledge of software development practices, application architectures, and infrastructure patterns, applying that knowledge to improve security tooling effectiveness.</li><li>Contribute code, scripts, configurations, and infrastructure-as-code to support application security platforms and workflows.</li><li>Support and mentor junior engineers through technical guidance, code reviews, and knowledge sharing.</li><li>Create and maintain technical documentation for application security systems, integrations, and operational processes.</li><li>Participate in special projects and perform other duties as assigned.</li></ul><p></p><p>
Qualifications</p><ul><li>Minimum of five years related work experience.</li><li>Undergraduate degree in a related field or the equivalent combination of training and experience.</li></ul><p><b>
Special Factors</b></p><p><b>
Sponsorship</b></p>
Vanguard is offering visa sponsorship for this position.<p></p><p><b>
About Vanguard</b></p><p>
At Vanguard, we don't just have a mission&mdash;we're on a mission.</p><p></p><p>
To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.</p><p></p><p><b>
How We Work</b></p><p>
Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.</p></div></div>

DevSecOps Engineer

<div><div>Provides advanced application and product security expertise by designing, developing, and integrating security features into systems, applications, and solutions. Ensures product security is maintained throughout the product lifecycle by embedding security controls, performing security assessments, and integrating new security features and updates into existing products. Works under general direction and serves as a technical partner to product and engineering teams to strengthen security posture while enabling business objectives.</div><div><p>
Core Responsibilities</p><p></p><ul><li>Secure the software development lifecycle (SDLC) by applying application development, deployment, and security expertise.</li><li>Operate, configure, and continuously improve application security tooling, with a primary focus on SAST and SCA, including policy tuning and integration into CI/CD pipelines.</li><li>Identify, analyze, and triage application security vulnerabilities; apply risk-based prioritization and work with engineering teams to drive timely remediation.</li><li>Collaborate with App Sec engineers and peer security teams to ensure consistent implementation, coverage, and alignment of application security tools, standards, and processes.</li><li>Champion a low-friction developer experience by streamlining scan workflows, reducing false positives, and providing clear, actionable feedback.</li><li>Participate in an on-call rotation to support application security tooling, assist developers, and respond to security threat events when required.</li><li>Identify and implement opportunities to automate application security processes to improve scalability, efficiency, and coverage.</li><li>Gather and report meaningful metrics to measure vulnerability trends, tool effectiveness, and application security program maturity.</li><li>Develop and maintain documentation for application security technologies, processes, and standards.</li><li>Provide guidance and training to development and cloud engineering teams on secure coding, dependency management, and deployment best practices.</li><li>Stay current on application security trends, tools, and standards, and contribute to continuous improvement of the AppSec program.</li><li>Participate in special projects and perform other duties as assigned.</li></ul><p></p><p>
Qualifications</p><p></p><ul><li>Minimum of five years related work experience.</li><li>Undergraduate degree in a related field or the equivalent combination of training and experience.</li></ul><p></p><p><b>
Special Factors</b></p><p><b>
Sponsorship</b></p>
Vanguard is offering visa sponsorship for this position.<p></p><p><b>
About Vanguard</b></p><p>
At Vanguard, we don't just have a mission&mdash;we're on a mission.</p><p></p><p>
To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.</p><p></p><p><b>
How We Work</b></p><p>
Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.</p></div></div>

DevSecOps Specialist

PackageX

<div><div><div><div><b>About PackageX</b>:</div>
<div>
PackageX is the execution layer for physical AI in enterprise logistics. We enable enterprises to see, understand, and execute real-world logistics operations in real time using Vision&ndash;Language&ndash;Action intelligence.</div><br>
<div></div>
<div>
We sit between systems of record (ERP, WMS, TMS) and the physical world, turning cameras, people, and automation into deterministic, auditable workflows. Rather than replacing existing systems, PackageX makes them operationally intelligent.</div><br>
<div></div>
<div>
We start with inbound receiving, the highest-friction choke point in logistics, and expand across adjacent workflows, sites, and automation modes. This creates a workflow-led enterprise expansion motion that compounds inside complex operations.</div><br>
<div></div>
<div>
We're a fast-growing pre-Series A stage startup in New York City with a distributed global team backed by Bullpen Capital, Pritzker Group, Sierra Ventures, Ludlow Ventures, MXV Capital, and NSV Wolf Capital.</div><br>
<div></div>
<div><b>
What we are looking for</b></div>
<div>
We&rsquo;re looking for a security engineer who is serious about their craft and genuinely curious about where the field is heading. This role sits at the intersection of traditional application security and the new challenges that come with building AI-powered products. You&rsquo;ll own security end-to-end, from hardening our cloud infrastructure and reviewing code, to thinking through what it means to secure systems that use large language models. You don&rsquo;t need to have done this exact job before, but you should be the kind of engineer who stays curious, learns fast, and cares deeply about getting things right.</div><br>
<div></div>
<div><b>
You will:
</b></div><ul><li>Own security across the SDLC from threat modeling during design, to security reviews during development, to vulnerability scanning in CI/CD. You&rsquo;ll use modern tooling (including AI-powered scanners where they genuinely help) to keep pace with a fast-moving engineering team.</li>
<li>Conduct vulnerability assessments and penetration tests across our web applications, APIs, and infrastructure. You&rsquo;ll identify issues before attackers do, document findings clearly, and work directly with developers to get them fixed.</li>
<li>Write and maintain security policies that engineers will actually follow, clear, practical, and grounded in how the team actually works, not copied from a compliance template.</li>
<li>Think carefully about the security risks that come with AI-powered products, such as prompt injection, sensitive data leaking through model outputs, and how to keep our LLM integrations safe for customers. This is a newer area, and you&rsquo;ll be helping us figure it out as we go.</li>
<li>Report on security posture to engineering leadership, tracking gaps, trends, and open issues in a way that helps the team prioritize and act, not just tick compliance boxes.</li>
<li>Review code for security issues and work closely with developers to fix them, building habits and processes so security feedback becomes a normal part of how the team ships, not a last-minute blocker.</li>
<li>Define and maintain security standards for how we build and deploy software, writing clear guidelines, putting automated checks in place, and making it easy for engineers to do the right thing by default.</li>
<li>Build automation that makes security work scale &mdash; whether that&rsquo;s smarter alerting, faster triage, or tooling that helps developers catch and fix issues without needing a security engineer in every conversation.</li>
<li>Participate in product and engineering design discussions &mdash; raising security concerns early, helping the team understand the risks, and finding solutions that don&rsquo;t slow down shipping.</li>
<li>Embed security into our CI/CD pipelines and development workflows &mdash; reducing the time between finding a vulnerability and getting it fixed, and making security a shared responsibility across the engineering team.</li>
<li>Keep up with how the security landscape is evolving &mdash; particularly as AI becomes a bigger part of how software is built and attacked. You&rsquo;ll bring that knowledge back to the team and help us stay ahead of new threats.</li></ul><br>
<div></div>
<div><b>
Skills and Qualification:</b></div>
<ul>
<li>A degree in Computer Science, Information Security, or a related field</li>
<li>3+ years of hands-on experience in application security or security engineering.
</li><li>Proven ability to build, manage, and monitor security in production environments where reliability matters &mdash; you&rsquo;ve operated under pressure, handled incidents, and know what it takes to keep systems safe at scale.</li>
<li>Solid experience securing web applications, APIs, and cloud infrastructure &mdash; covering areas like intrusion detection, access control design, incident response, and security policy development. You know the fundamentals well and can apply them in a real product context.</li>
<li>Experience with static and dynamic code analysis, you&rsquo;ve worked with SAST and DAST tools, know their limitations, and can help developers actually act on what those tools surface rather than just generating noise.</li>
<li>Familiarity with modern cloud architectures, serverless, microservices, and API-first designs. Bonus if you&rsquo;ve thought about what it means to secure systems that call LLM APIs or handle AI-generated outputs as part of their core workflow.</li>
<li>Strong understanding of OWASP Top 10 vulnerabilities and how to defend against them. Familiarity with the OWASP Top 10 for LLMs is a plus; we&rsquo;re building AI-powered products and need someone who can think through what that means for security.</li>
<li>Good understanding of RESTful API security, authentication, authorization, rate limiting, and input validation. Our platform is API-heavy, and we need someone who can spot the common mistakes and knows how to prevent them.</li>
<li>Strong experience in penetration testing and vulnerability analysis. You can run an assessment end-to-end, write up findings that people actually read, and follow through until issues are resolved &mdash; not just hand over a report and move on.</li>
<li>Experience working with AWS and/or GCP, securing cloud infrastructure, managing IAM policies, and understanding how cloud-native services introduce their own security considerations. We run primarily on AWS.</li></ul><br>
<div></div>
<div><b>
What can you expect from the application process?</b></div>
<div>
All applications will be looked at by the People team, who will reach out to shortlisted candidates. Across various interview rounds, you'll speak with the hiring manager and other functional heads. We want to have an open discussion about your work and how we can be a great fit. The process may also involve an assessment or presentation relevant to the role. You can expect an offer after three rounds of interviews. All offers are subject to satisfactory reference and background checks.</div><br>
<p></p>
</div></div>
<div><div>We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</div></div></div>

Application Security Engineer

<div><p>Greetings from OpenKyber! We reaching out about an exciting Direct client opportunity with one of our clients. Please review the requirements and let me know if you are interested in this position? Direct client Req:: Need Sr Application Security Architect &amp; Engineer Hybrid , VA PLEASE SEND THE RESUMES TO hirings@openkyber.com ! Job Description: Description: ABOUT THE ROLE Virginia Tax is seeking an Application Security Engineer (ASE) with 5+ years of experience to join the Office of Technology under Joint Security Operations. In this role, the ASE serves as a dedicated security partner to application teams, providing guidance on secure design, vulnerability management, and secure development practices. The ASE works collaboratively across the SDLC to ensure security is embedded into application design, development, testing, and deployment. This includes supporting compliance requirements, delivering training and education, and assisting teams with vulnerability remediation efforts. The successful candidate will identify and recommend improvements to improve the security of all Virginia Tax applications, promote secure coding and development practices, and contribute to ongoing initiatives that reduce risk and strengthen the agency s overall security posture. Responsibilities include but not limited to: Provide security guidance, training, and best practices for development and operations teams. Support secure software development by applying knowledge of SDLC, Agile, and Scrum methodologies. Evaluate software architecture and design for security risks and alignment with DevSecOps principles. Promote and enforce secure coding standards and guidelines. Review source code to identify vulnerabilities and recommend remediation strategies. Assess security risks across multiple programming languages (e.g., JavaScript, C#, Java, Ruby, SQL). Analyze and secure modern web application architectures, including cloud, APIs, microservices, and client server models. Identify and address common vulnerabilities, including those outlined in the OWASP Top 10. Support vulnerability remediation, patch management, and continuous improvement efforts. Utilize application security testing tools such as SAST, DAST, IAST, and platforms like Accunetix, Veracode, Jenkins, Splunk, Rapid7, and Tenable. Interpret and act on findings from SIEM systems, including Splunk. Apply knowledge of common security controls and frameworks. Ensure compliance with relevant security regulations and standards (e.g., NIST 80053, IRS Pub 1075, PCIDSS). Implement and evaluate AWS cloud security controls and best practices. Create, maintain, and review System Security Plans (SSPs). Troubleshoot and resolve complex technical and security-related issues. Stay current with evolving threats, technologies, and industry trends. Develop detailed plans and communicate risks, impacts, and recommendations effectively. Collaborate with application teams, QA engineers, and operations teams to integrate security into workflows. Provide constructive, actionable feedback to application teams. Communicate technical concepts clearly to both technical and nontechnical audiences. Work closely with other security analysts and technology teams to support agency and enterprise security initiatives. Manage multiple tasks, prioritize effectively, and meet deadlines. Apply critical thinking to evaluate and mitigate security risks and vulnerabilities. Required Skills/Experience: Five or more years experience in application security. Two or more years network or firewall/AWS Security Groups. Experience with log collection, vulnerability scans and remediation, or privileged access management. Strong understanding of security concepts, network protocols, and threat vectors. Proficiency in SIEM,IDS/IPS, EDR,and other relevant security tools. Excellent analytical and problem-solving skills. Strong communication, collaboration, and documentation skills. Ability to work independently and as part of a team in a fast-paced environment. Have experience and a strong knowledge of the following: Splunk, InsightVM Rapid7, Tenable, CyberArk, Jenkins, Veracode Linux and Windows Operating Systems, Baseline hardening of operating systems IIS and Apache, Scripting Languages and SQL, PowerShell, Firewall At least one of these certs below is REQUIRED: CompTIA Security+ ISC2 CC (Certified in Cybersecurity) Offensive Security Certified Professional (OSCP) CCSP (Certified Cloud Security Professional) CSSLP (Certified Secure Software Lifecycle Professional) At least one of these certs below is highly DESIRED (Independently and or with one of the above) AWS Solutions Architect (Associate/Professional) AWS Security Specialty At least one of the any is DESIRED CompTIA PenTest+ Certified Ethical Hacker (CEH), GIAC Certified Intrusion Analyst (GCIA Fill the above skills in the below box and have consultant to complete SKILLS MATRIX Skill Required Amount of Experience Experience Application Security Required 5 Years Network or Firewall/AWS security Groups Required 2 Years Infrastructure as Code (IaC): Advanced proficiency in Terraform for multi-account landing zones and automated provisioning. Required 2 Years Experience with log collection, vulnerability scans and remediation, or privileged access management Required 4 Years Proficiency in SIEM, IDS/IPS, EDR, and other relevant security tools. Required 4 Years Networking &amp; Hybrid Connectivity: Solid understanding of routing, firewalls, AWS Direct Connect, and VPNs in a hybrid cloud environment. Required 4 Years One REQUIRED: CompTIA Security+, ISC2 CC (Certified in Cybersecurity), Offensive Security Certified Professional (OSCP), CCSP, or CCLP. UPLOAD COPY!! Required CI/CD &amp; DevOps: Experience with GitLab CI/CD, Jenkins, or AWS CodePipeline for automated, secure deployments. Highly desired 5 Years Splunk, InsightVM Rapid7, Tenable, CyberArk, Jenkins, Veracode Highly desired 2 Years Linux and Windows Operating Systems, Baseline hardening of operating systems Highly desired 2 Years IIS and Apache, Scripting Languages and SQL, PowerShell, Firewall Highly desired 2 Years One highly DESIRED (Independently and or with one of the above): AWS Solutions Architect (Associate/Professional) or AWS Security Specialty Highly desired One of these is DESIRED: CompTIA PenTest+, Certified Ethical Hacker (CEH), or GIAC Certified Intrusion Analyst (GCIA) Highly desired OpenKyber Austin, TX 78727| Direct: OpenKyber is an Affirmative Action/Equal Opportunity Employer that supports workplace diversity. All employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, marital or family status, sexual orientation, gender identity, or genetic information. All OpenKyber staff must be able to demonstrate the legal right to work in the United States. OpenKyber is an E-Verify employer</p>
<p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

OCI Cloud Security Engineer

Tata Consultancy Services (TCS)

<div></div><div><div><div><p>Experience &amp; Knowledge Vulnerability Management,Qualys guard , ServiceNow &middot; Executed and experienced in Manual Penetration Testing &middot; Performed Threat modelling &amp; Threat profiling &middot; Security testing related certifications &ndash; CEH, AppScan Certified etc &middot; Conducted secure code reviews &middot; Formulated Pen Testing plans &amp; strategies &middot; Good Security Report
</p></div></div><div><div><div><b>Location</b></div>
<div>Hyderabad</div>
</div><div><div><b>Job Function</b></div>
<div>TECHNOLOGY</div>
</div><div><div><b>Role</b></div>
<div>Analyst</div>
</div><div><div><b>Job Id</b></div>
<div>402868</div>
</div><div><div><b>Desired Skills</b></div>
<div>VAPT | VAPT Nexpose Rapid 7</div>
</div></div><p>Desired Candidate Profile
</p><div><div><b>Qualifications</b> : BACHELOR OF BUSINESS STUDIES, BACHELOR OF COMMERCE, BACHELOR OF COMPUTER APPLICATION</div></div></div><div></div>

Application security / Penetration Testing/VAPT(OSCP)

Parker Hannifin

<div><p><b>Position Summary</b>
</p><p>POSITION SUMMARY:</p><p>
The Web Application Security Engineer is responsible for enterprise Web Application Firewall and edge security operations protecting high-traffic ecommerce applications and APIs. This role provides hands-on ownership of Akamai security platforms and supports additional security technologies.</p><p>
This position requires strong operational discipline, deep understanding of web application threats, and the ability to balance security enforcement with availability and customer experience in production environments.</p><p><b>
Responsibilities</b>
</p><p><b>Essential Functions:</b></p><ul><li>
Monitor and analyze inbound web traffic to identify and respond to suspicious activities, ensuring real-time threat mitigation.
</li><li>Collaborate with cross functional teams to integrate WAF solutions into CI/CD pipelines and application architectures and focus on maturing WAF protections.
</li><li>Maintain and optimize WAF configurations to balance security, performance, and user experience and enable process optimization and automation.
</li><li>Be involved in regular security assessments, vulnerability scans, and penetration testing to identify gaps in WAF protection.
</li><li>Maintain a close working relation with the Application Development team to ensure optimal protections are used for all new application releases.
</li><li>Ensure adequate testing and validation and has been performed for all protections and mitigations before rollout.
</li><li>Collaborate with our Software Development, Quality Assurance, and Project Management teams to solve difficult technical problems, define and deliver highly scalable cloud applications and make fact-based recommendations regarding tactical and strategic technology adoption for our team.</li><li>
Promote, foster, and proactively implement agile best practices daily.</li><li>
Design, deploy, and manage WAF solutions for on-premise and cloud-based platforms</li><li>
Develop and fine-tune WAF policies, rules, and signatures to mitigate known threats and application abuses as well as emerging threats.
</li><li>Lead incident response efforts for web application and network attacks, including root cause analysis and remediation.</li><li>
Participate in on-call rotations to support 24/7 operations as needed.
</li></ul><p><b>Qualifications</b>
</p><p><b>Qualifications &amp; Required Skills:</b></p><ul><li>
4 year University/College Degree or equivalent.</li><li>
5+ years in the IT field and 3+ years of hands-on experience managing cloud-based WAF platforms, Akamai preferred</li><li>
You are comfortable working in a full stack software development environment.</li><li>
Experience analyzing security logs, traffic patterns, and attack behavior</li><li>
Strong networking fundamentals and familiarity with network protocols (HTTP/HTTPS, TCP/IP, DNS) and web technologies (HTML, JavaScript, APIs).
</li><li>Solid understanding of all phases of the web Software Development Life Cycle</li><li>
Deep understanding of digital platforms and technologies</li><li>
Experience in System Integration touch points &ndash; API Gateway, ETL, WebServices (REST,SOAP)</li><li>
Experience in working within an Agile/SCRUM software development model</li><li>
Strong troubleshooting, analytical, and problem-solving skills</li><li>
Ability to adapt to changing roles and changing priorities</li><li>
Strong interpersonal skills and relate well with all levels of the organization</li><li><p>
Excellent written and verbal communication skills</p></li></ul><p><b><br>
Parker Hannifin</b>
</p><p>Parker Hannifin is a Fortune 250 global leader in motion and control technologies. For more than a century, we&rsquo;ve enabled engineering breakthroughs that make energy cleaner, transportation safer, medical treatments more effective, and manufacturing more efficient.</p><p>
With empowered team members in more than 40 countries, Parker serves customers across aerospace &amp; defense, energy, HVAC &amp; refrigeration, in-plant &amp; industrial equipment, off-highway and transportation.</p><p>
Our scale is global, but our purpose is personal. We enable breakthroughs that improve lives, strengthen communities and create a brighter future.</p><p>
Our Purpose &mdash; Enabling Engineering Breakthroughs that Lead to a Better Tomorrow &mdash; comes to life through our people-first culture where teamwork drives performance, inclusion fuels innovation and growth is encouraged. This environment fosters collaboration and empowers team members from engineering and manufacturing to finance, supply chain, human resources, information technology and beyond.</p><p>
By combining deep expertise with an entrepreneurial spirit, we help customers succeed in markets that demand performance, reliability, and sustainability.</p><p>
As we look to the future, Parker is advancing initiatives in energy efficiency and sustainability while developing the next generation of talent and leaders to engineer a better tomorrow.</p><p><b>
Equal Employment Opportunity</b>
</p><p>Parker is an Equal Opportunity and Affirmative Action Employer. Parker is committed to ensuring equal employment opportunities for all job applicants and employees. Employment decisions are based upon job related reasons regardless of race, ethnicity, color, religion, sex, sexual orientation, age, national origin, disability, gender identity, genetic information, veteran status, or any other status protected by law. However, U.S. Citizenship, Permanent Residency or other appropriate status is required for certain positions, in accord with U.S. import &amp; export regulations.<br>
<br>
(&ldquo;Minority / Female / Disability / Veteran / VEVRAA Federal Contractor&rdquo;)</p><p>
If you would like more information about Equal Employment Opportunity as an applicant under the law, please go to Employees &amp; Job Applicants | U.S. Equal Employment Opportunity Commission</p></div>

Digital & IT Technical Spec 1 - Web Application Security

Search 10000+ Application security specialist jobs near you this April. New roles added regularly across leading industries. Apply today.