Application Security Engineer

Navitas Business Consulting, Inc.

Application Security Engineer strengthening security measures for web and API applications at Navitas. Collaborating with engineering teams to ensure best security practices and timely remediation of vulnerabilities.

Posted 7/10/2026full-timeRemote • 🇮🇳 IndiaMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

JenkinsPythonSDLC

About the role

Key responsibilities & impact

Provide security engineering support for web and API applications.
Integrate security controls into Secure SDLC, including threat modeling and security design reviews.
Ensure adherence to organizational security standards and best practices.
Administer and manage vulnerability scanning tools (e.g., Tenable or similar).
Configure, tune, and maintain scanning policies and schedules.
Optimize tool performance to improve accuracy and reduce false positives.
Implement and maintain SAST and DAST tools within CI/CD pipelines.
Collaborate with engineering teams to ensure seamless integration and actionable outputs.
Identify and validate vulnerabilities through automated and manual testing.
Perform false-positive analysis and assess exploitability.
Review scan results and track vulnerabilities to closure.
Coordinate with development teams for timely remediation.
Validate vulnerabilities using manual testing and offensive security methods.
Document attack paths, reproduction steps, and impact clearly.
Perform manual and automated security testing for applications and APIs.

Requirements

What you’ll need

Bachelor’s degree in computer science, Information Security, or related field.
3–6 years of experience in Application Security or related domain.
Hands-on experience with SAST, DAST, and vulnerability scanning tools.
Strong understanding of OWASP Top 10, web application and API security.
Experience with CI/CD pipeline integrations (e.g., Jenkins, GitHub Actions, GitLab).
Knowledge of secure coding practices and common vulnerability patterns.
Familiarity with scripting (Python, Bash, or similar) is a plus.
Experience with threat modeling and secure design reviews is preferred.
Exposure to red teaming or penetration testing techniques is preferred.
Relevant certifications (e.g., OSCP, CEH, GWAPT) are a plus.

Benefits

Comp & perks

E-Verify participation
Equal Opportunity Employer

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Application SecurityVulnerability ManagementThreat ModelingSecure Coding PracticesManual Security TestingAutomated Security TestingExploitability AssessmentFalse Positive AnalysisSecurity Design ReviewsScripting (Python, Bash)

Certifications

OSCPCEHGWAPT