application security specialist

Al Adyat consultancy

Job Summary We are seeking a highly skilled and experienced Application Security Expert to join our team. The ideal candidate will have a minimum of 5 years of experience in application security, vulnerability assessment, threat modeling, secure coding practices, and security testing. The candidate should be a graduate in Computer Science, IT, or any technical field.Responsibilities<ul><li>Conducting vulnerability assessments and penetration testing on applications.</li><li>Performing threat modeling to identify potential security risks.</li><li>Implementing secure coding practices to ensure the security of applications.</li><li>Conducting security testing to identify and mitigate security vulnerabilities.</li><li>Collaborating with development teams to integrate security into the software development lifecycle.</li><li>Providing guidance and training on application security best practices.</li><li>Developing and maintaining application security policies and procedures.</li></ul>Qualifications<ul><li>Minimum of 5 years of experience in application security.</li><li>Bachelor&rsquo;s degree in Computer Science, IT, or any technical field.</li><li>Strong knowledge of vulnerability assessment and penetration testing methodologies.</li><li>Experience with threat modeling and secure coding practices.</li><li>Proficiency in security testing tools and techniques.</li><li>Excellent analytical and problem-solving skills.</li><li>Strong communication and interpersonal skills.</li><li>Ability to work independently and as part of a team.</li></ul>Job Type: Full-timePay: QAR15,000.00 - QAR20,000.00 per monthEducation:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>Application Security: 4 years (Required)</li></ul>Language:<ul><li>Arabic (Required)</li><li>English (Required)</li></ul>License/Certification:<ul><li>degree in Computer Science (Required)</li></ul>

Appsec (Application Security Expert)

Qiddiya Investment Company

<div>Qiddiya Investment Company is looking for a highly-skilled and motivated Assistant Manager - Application Security to join our dynamic team. In this role, you will play a critical part in fortifying the security framework for our application development processes. You will work collaboratively with cross-functional teams to embed security best practices across all stages of the software development lifecycle (SDLC).
Your responsibilities will include conducting comprehensive security assessments, performing vulnerability analysis, and offering guidance on secure coding practices. You will influence the culture of security within our organization, ensuring that applications are developed with a strong security mindset.<h3 class="jobSectionHeader">
Key Responsibilities</h3><ul>
<li>Assist in strategizing and executing the application security roadmap aligned with organizational objectives.</li>
<li>Conduct regular security assessments and penetration testing on applications and services.</li>
<li>Provide actionable guidance for developers on remediating identified vulnerabilities.</li>
<li>Participate in threat modeling and risk assessment activities.</li>
<li>Facilitate training sessions and workshops to promote awareness of secure coding practices.</li>
<li>Stay up-to-date with the latest security trends, vulnerabilities, and industry standards.</li>
<li>Collaborate with DevOps teams to integrate security tools and practices into CI/CD pipelines.</li>
<li>Document and report on security metrics and the status of remediation efforts.</li>
</ul>
Requirements<ul>
<li>
Bachelor's degree in Computer Science, Cybersecurity, Information Technology or related discipline.</li>
<li>Minimum 4 years of professional experience in application security or software development roles.</li>
<li>Expertise in application security frameworks and standards (e.g., OWASP Top Ten, NIST guidelines).</li>
<li>Experience with security testing tools (SAST, DAST, IAST) and vulnerability management.</li>
<li>Strong understanding of programming languages, secure coding practices, and software development methodologies.</li>
<li>Excellent communication skills, capable of conveying complex security concepts to non-technical stakeholders.</li>
<li>Relevant certifications (e.g., CISSP, CSSLP, CEH) are a plus.</li>
</ul>
Benefits
Comprehensive benefits package</div>

Assistant Manager - Application Security

Netcracker

We are looking for a person with good knowledge of web and mobile applications security testing, proven experience of handling large-scale security testing projects, including static and dynamic assessment methods for web, mobile and API s. it will be required to demonstrate the knowledge of common attacks for mobile, web and API systems and relevant methods of their remediation, secure design patterns of business flows within web and mobile applications, cryptography specifications (TLS, X.509, hashing and encryption algorithms, handshake) and their common implementation flaws, basic understanding for authentication standards (Oauth 2.0, Open ID Connect, SAML).
Demonstrable knowledge about test management using Jira or similar tools, test case set-up, report generation, defect management lifecycle and risk scoring using industry standard methodologies like CVSS. The role will be responsible for driving security testing activity, ensuring the timely delivery of assessments and collaborating with cross-functional teams in an implementation project for our clients.
Principal Duties and Responsibilities:
<ul>
<li>Lead and manage a team of application security testers to execute comprehensive security testing across web, API, and mobile</li>
<li>Plan and prioritize testing activities to ensure timely delivery of security assessments and actionable remediation plans.</li>
<li>Conduct and direct, hands-on application security testing, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST) and / or Mobile Application Security Testing (MAST) and / or Software Composition Analysis (SCA).</li>
<li>Produce clear and concise documentation like test strategy, test plan, testing report, issue summary along with prioritization based on risk and impact of the issue identified.</li>
<li>Work closely with Development, QA, and DevOps teams to embed security throughout the Software Development Lifecycle (SDLC).</li>
<li>Champion OWASP Top 10, CWE, and other global security standards across engineering practices.</li>
<li>Effectively manage reporting to client and different stakeholders on testing progress, issues, risks and collaborate on remediation of risks for testing process.</li>
<li>Monitor emerging threats and security trends, recommending improvements and countermeasures as needed.</li>
<li>Provide ongoing mentorship and training to junior team members and promote a security-first mindset.</li>
<li>Represent application security in cross-functional discussions and audits.</li>
</ul>
Background and Skills:
<ul>
<li>8 15 years of experience in Application Security Testing, with at least 2 3 years in a leadership or managerial role.</li>
<li>Proven experience in manual security testing techniques beyond tool-based scanning.</li>
<li>Strong hands-on expertise with SAST, DAST and SCA tools and frameworks.</li>
<li>Experience testing a range of applications including Web, RESTful APIs, and Mobile apps.</li>
<li>Deep understanding of OWASP Top 10, CWE, secure coding practices, and vulnerability mitigation techniques.</li>
<li>Familiarity with DevSecOps principles and integrating security testing into CI/CD pipelines</li>
<li>Strong communication, stakeholder management, and reporting skills.</li>
<li>Relevant certifications such as OSCP, CEH, GWAPT, or equivalent are a plus.</li>
</ul>

Application Security Testing Manager

<div>
 
 JOB DESCRIPTION
 
 
 
 
 
 Performing security tests of internal and externally IT infrastructures like IP, API, Web
 
 
 pages, Servers or network devices within the company, in line with company objectives
 
 
 and regulatory requirements, and detecting and reporting vulnerabilities with manual or
 
 
 automated tools in a certain periods.
 
 
 
 
 
 QUALIFICATIONS:
 
 
 
 
 
 &bull; BS or MS in Computer Science, Computer/Electrical/Electronics/Mathematics
 
 
 Engineering or related fields
 
 
 &bull; Experience of at least 4 years in Penetration or Application Security Test projects
 
 
 &bull; Having a good communication skills
 
 
 &bull; Excellent problem solving skills and ability to formulate alternative approaches
 
 
 &bull; Knowledge of computer networking concepts and protocols and network security
 
 
 methodologies, operating systems, computer networks and databases
 
 
 &bull; Knowledge of software and secure code development processes
 
 
 &bull; Preferably designed and tested SSDLC processes
 
 
 &bull; Ability to understand and work with various web and mobile services such as SOAP,
 
 
 WSDL, REST, etc.
 
 
 &bull; Understand and evaluate applications from both technical and business process
 
 
 perspectives
 
 
 &bull; Experienced in tools used in penetration tests such as Metasploit, Nessus, Burpsuite,
 
 
 Netsparker, Acunetix
 
 
 &bull; Preferably having or had a BRSA penetration test
 
 
 
 
 
 What you'll do:
 
 
 
 
 
 &bull; Performing manual network penetration tests on IT infrastructure within the company
 
 
 &bull; Performing penetration tests, analyzing test results, analyzing risks and developing
 
 
 solution for vulnerabilities.
 
 
 &bull; Performing manual penetration tests on mobile, web and API based applications within
 
 
 the company
 
 
 &bull; Determination and follow-up of BRSA penetration test processes
 
 
 &bull; Performing vulnerability vulnerabilities scans with products such as Nessus, Rapid7,
 
 
 analyzing the test results and meeting with the related business or IT units to eliminate
 
 
 the vulnerabilities
 
 
 &bull; Scanning application source codes with static application security test tools and
 
 
 tracking the vulnerabilities.
 
 
 &bull; Performing security hardening for Windows and Linux operating systems.
 
 
 
 
 
 
 
 
 TOM Bank is here to change banking!
 
 
 
 
 
 TOM Bank is T&uuml;rkiye&rsquo;s first game-changer digital retail bank with the vision of being the biggest in T&uuml;rkiye and among the five fintech in Europe.
 
 
 
 
 
 TOM , which reached 9 million users in a short time with the Hadi application, is under the umbrella of Ayd&inodot;n Holding which hosts strong brands such as A-101, English Home, Memorial and also includes companies TOM Bank, TOM Digital, TOM PAY, TOM Finansman.
 
 
 
 
 
 
 Who We Are :
 
 
 
 
 
 
 As TOM,
 
 <ul>
 <li>
 Customer Passionate 💜
 </li>
 <li>
 Game Changers 🚀
 </li>
 <li>
 Smart Efficient 🤝
 </li>
 <li>
 Super Clear 😎
 </li>
 <li>
 The Dream Team🏅
 </li>
 </ul>
 
 
 
 
 
 If you are ready to take off, join us and let&rsquo;s change the future of banking together!
 
 
 
 
 To know us better, download the link :
 
 
 https://hadigeliyorhadi.com.tr/hadi-indir
 
 
 
 
</div>

Application Security Engineer

Accenture

Project Role : Security Consulting Practitioner 
Project Role Description : Advise clients on their business protection journey by shaping security strategy, designing solutions, and providing guidance to strengthen cyber resilience.
 
Must have skills : Product Security 
Good to have skills : NA 
Minimum 7.5 year(s) of experience is required 
Educational Qualification : 15 years full time education 
 
Summary: As a Security Advisor, you will provide enterprise-level advice to make organizations cyber resilient. Your typical day will involve engaging with various stakeholders to assess their security posture, identifying vulnerabilities, and recommending strategies to enhance their defenses against cyber threats. You will also facilitate discussions on best practices and ensure that digital assets are protected while fostering trust within the organization and with external partners. Roles &amp; Responsibilities: - Lead and mentor a team of mobile security analysts in proactively identifying and flagging malicious code and security threats within Android applications. - Oversee the analysis of emerging threats and ensure effective response to security incidents and escalations. - Drive initiatives to proactively identify new malware trends, spam, and other abuse vectors on the Android platform. - Provide proactive inputs and innovative ideas to enhance team workflows, efficiency, and overall security posture. - Possess and apply the ability to proficiently review applications and SDKs through analysis, unpacking, and reverse engineering of software that may compromise user privacy, and guide team members in these techniques. - Demonstrate and impart a deep understanding of techniques utilized by malicious software to tamper with user machines and hinder removal efforts. - Review and approve comprehensive reports detailing analysis findings and recommended remediations. - Collaborate with threat detection and signature engineering teams to translate reverse engineering insights into robust detection logic by mapping malware behaviors to the MITRE ATT&amp;CK framework and developing corresponding YARA rules and network signatures. - Ability to independently review and resolve complex escalations from internal and external sources, collaborating effectively with cross-functional teams and guiding team members in similar situations. Professional &amp; Technical Skills: - A strong background in Application Security, Security Auditing, or a prior role focused specifically on Android malware analysis. - A solid understanding of the Android threat landscape and Potentially Harmful Application (PHA) classifications is highly desirable. - Deep understanding of the Android OS, application lifecycle, and Dalvik bytecode (smali). Must have strong proficiency in reading source code in Java and Kotlin. - Exposure to JavaScript, Flutter &amp; Query languages such as SQL - Experience with scripting languages (Python, Bash). Additional Information: - The candidate should have minimum 7.5 years of experience in Product Security. - This position is based at our Bengaluru office. - A 15 years full time education is required.
 
15 years full time education

Security Consulting Practitioner

Cognizant Technology Solutions

<div>Job Description:<ul><li>Advanced capabilities on Application Security and technologies thereof.</li><li>Advanced capabilities on Network Security and technologies thereof.</li><li>Proficiency on Endpoint Security capabilities.</li><li>Good understanding on Change and Patch management for a large organisation.</li><li>Security Monitoring and Operations capabilities</li><li>Incidence handling, forensic analysis and evidence handling capabilities.</li><li>Identity and Access governance and management technical capabilities.</li><li>Cloud Security Experience with Aviation Cyber Security Frameworks</li><li>Experience with managing Cyber Security over a large geographically dispersed technology environment</li></ul>
One or more of the following certifications:<ul><li>Certified Information Systems Auditor (CISA),</li><li>Certified Information Systems Manager (CISM),</li><li>Certified Information Systems Security Professional (CISSP)</li><li>Certified in Risk and Information Systems Control (CRISC)</li><li>Certified Ethical Hacker (CEH)</li></ul>
About Cognizant:
Cognizant (Nasdaq: CTSH) engineers modern businesses. We help our clients modernize technology, reimagine processes and transform experiences so they can stay ahead in our fast-changing world. Together, we're improving everyday life. See how at www.cognizant.com or @cognizant.
#LI-CTSAPAC</div>

Cyber Security

Grant Thornton

<div></div><ul><div>3 - 8 Years</div>
<div></div><div>4 Openings</div>
 <div>Bengaluru</div></ul>
 <div><h3 class="jobSectionHeader">Role description</h3>
<div>We are looking for an experienced Microsoft Security Expert to lead the design, implementation, and management of enterprise data protection strategies using Microsoft Purview Data Loss Prevention (DLP), Microsoft Defender for Cloud Apps (CASB), and related security platforms. This role is critical in enforcing Zero Trust principles, safeguarding sensitive data, and ensuring compliance across cloud and on-premises environments.

 Key Responsibilities
<ul>
<li>Data Loss Prevention (DLP) Strategy</li>
<ul><li>Design and implement DLP policies using Microsoft Purview to protect sensitive data across Microsoft 365 services (Exchange, SharePoint, OneDrive, Teams), endpoints, and non-Microsoft cloud apps.</li>
<li>Configure sensitivity labels, adaptive protection, and policy enforcement for data at rest, in use, and in motion.</li>
</ul><li>CASB Integration</li>
<ul><li>Deploy and manage Microsoft Defender for Cloud Apps (MDCA) to monitor and control SaaS usage, enforce session policies, and detect risky behaviors.</li>
<li>Integrate CASB with Purview and Defender for Endpoint for unified visibility and incident response.</li>
</ul><li>Governance &amp; Compliance</li>
<ul><li>Align DLP and CASB configurations with organizational compliance frameworks and regulatory requirements.</li>
<li>Collaborate with Information Governance and Risk teams to ensure consistent application of data classification and retention policies.</li>
</ul>
</ul>.
<ul>
<li>Incident Response &amp; Reporting</li>
<ul><li>Investigate DLP s and CASB incidents, gather evidence, and coordinate remediation with stakeholders.</li>
<li>Generate compliance and security reports for leadership and auditors.</li>
</ul><li>Continuous Improvement</li>
<ul><li>Stay current with Microsoft security roadmap and emerging threats.</li>
<li>Optimize policies based on analytics, user behavior, and evolving business needs.</li>
</ul>
</ul></div><h3 class="jobSectionHeader">Skills</h3>
<div>Required Qualifications
<ul>
<li>Experience</li>
<ul><li>3+ years in information security with a focus on data protection and cloud security.</li>
<li>Hands-on experience with Microsoft Purview DLP, Microsoft Defender for Cloud Apps (CASB), and Microsoft 365 security ecosystem.</li>
</ul><li>Technical Skills</li>
<ul><li>Strong understanding of data classification, sensitivity labels, and adaptive protection.</li>
<li>Familiarity with SIEM integration, incident response workflows, and regulatory compliance (e.g., GDPR, HIPAA).</li>
</ul><li>Certifications (Preferred)</li>
<ul><li>Microsoft Certified: Information Protection Administrator Associate</li>
<li>Microsoft Certified: Security Operations Analyst Associate</li>
<li>CISSP or equivalent.</li>
</ul>
</ul>Preferred Attributes
<ul>
<li>Excellent analytical and troubleshooting skills.</li>
<li>Strong communication and documentation abilities.</li>
<li>Ability to work cross-functionally with IT, compliance, and business teams.</li></ul></div></div>
 <div><h3 class="jobSectionHeader">About Grant Thornton INDUS</h3>
<div>&lsquo;Grant Thornton INDUS&rsquo; comprises GT U.S. Shared Services Center India Pvt Ltd and Grant Thornton U.S. Knowledge and Capability Center India Pvt Ltd. Grant Thornton INDUS is the shared services center supporting the operations of Grant Thornton LLP, the U.S. member firm of Grant Thornton International Ltd. Established in 2012, Grant Thornton INDUS employs professionals across a wide range of disciplines including Tax, Audit, Advisory, and other operational functions. What sets us apart isn&rsquo;t just what we do &ndash; it&rsquo;s how we do it. We support and enable the firm&rsquo;s purpose of making business more personal and building trust into every result. We&rsquo;re collaborators &ndash; obsessed with quality and ready for anything &ndash; who understand the value of strong relationships. Our professionals are well integrated to seamlessly support the U.S. engagement teams, help increase Grant Thornton&rsquo;s access to a wide talent pool, and improve operational efficiencies. Empowered people, bold leadership, and distinctive client service are imbibed in the culture at Grant Thornton INDUS. We are a transparent, competitive, and excellence-driven firm that offers an opportunity to be part of something significant. In addition, professionals at Grant Thornton INDUS serve communities in India through inspirational and generous services to give back to the communities they work in. Grant Thornton INDUS has its offices in two locations in India &ndash; Bengaluru and Kolkata</div></div>

Email Security Engineer – Proofpoint Specialist - SA

Search 10000+ Application security specialist jobs near you this October. New roles added regularly across leading industries. Apply today.