OpenOpportunity Sourced Jobs — Mumbai
Full Time · On Site · Entry Level
Role: Cyber Security | Department: IT & Information Security | Industry: IT Services & Consulting | Education: UG: Any Graduate PG: Any Postgraduate, MBA/PGDM in Any Specialization Purpose/Objective The Application Security Executive is responsible for supporting the application security program, focusing on ensuring that applications are secure from development to deployment. This role involves collaborating with development teams to enforce secure coding practices, conducting vulnerability assessments, and assisting with the implementation of security solutions throughout the software development lifecycle (SDLC). The Application Security Executive will help to identify and mitigate security risks, ensuring that applications meet the organization's security standards and compliance requirements. Key Responsibilities of Role Application Security Executive Application Security Support: Assist in the implementation of the application security program across the organization, ensuring secure development practices are followed. Work closely with the development teams to ensure that applications are designed, coded, and tested with security in mind. Help with the integration of security practices into the software development lifecycle (SDLC), including code reviews, threat modeling, and security testing. Vulnerability Management: Conduct regular vulnerability assessments, including static and dynamic application security testing (SAST/DAST), to identify security flaws within applications. Assist in managing and mitigating vulnerabilities found during testing. Proficiency with application security tools, such as CheckMarx, Fortify, Burpsuite, Acunetix, Appscan, Tenable, and static code analysis tools, and experience on Industry application security assessment frameworks (e.g., OWASP, NIST, PCI DSS) and DevSecOps platforms (e.g., GitLab, GitHub, etc.) Work Experience (Range of years): 2+ years of relevant experience in application security and secure software development lifecycle including hybrid platform. Note: A genuine, detailed Application Security role at Adani Group, a major Indian conglomerate, but with three different title strings in play: the displayed title is "Senior Engineer - Cyber Security," the structured Role field simply reads "Cyber Security," and the JD body repeatedly calls the position an "Application Security Executive" -- a notably more junior-sounding designation than "Senior Engineer." The JD explicitly states "2+ years of relevant experience," which sits above the 0-2 year band this search targets. The text also has a dense cluster of spelling errors near its close -- "secuiry" (security), "asesssment" (assessment), "frameowrk" (framework), and "relevent" (relevant) -- along with a broken abbreviation rendering that splits "e.g." across lines with stray periods ("e.\ng.\n,").
PCI DSS, Acunetix, Github, Threat Modeling, Software Testing, Information Security, Devsecops, Fortify, Management, Appscan, SDLC, Burp Suite, Software Development Life Cycle, Software Development, Application Security, Risk Analysis, OWASP, Tenable, Nist, Static Analysis, Gitlab