Cybersecurity · LT-2026-006

Application Security Engineer

Confidential — Govt. Sector · Posted 1 week ago

Location

Chennai

Work mode

On-site

Type

Full-time

Experience

5 – 9 yrs

Compensation

₹24 – 36 LPA

Posted

1 week ago

About the role

A government-adjacent programme is standing up its application-security function. You'll define secure-SDLC practices, run threat modelling exercises, and partner with product teams to close vulnerabilities.

On-site role in Chennai with strong process ownership and executive access.

What you'll do
  • Run threat-modelling sessions with product and engineering teams

  • Own SAST/DAST tooling and triage flow

  • Lead security reviews of new features + architecture proposals

  • Coordinate penetration tests and manage remediation

  • Report security posture to the CISO monthly

What we're looking for
  • 5+ years in application security or product security engineering

  • Fluency with OWASP Top 10 and modern web/API attack patterns

  • Hands-on with SAST/DAST tools (Snyk, Semgrep, Burp)

  • Cloud security fundamentals (AWS or Azure)

  • Strong written communication for security findings

Nice to have
  • CISSP / OSCP

  • Experience in regulated / government sectors

  • Prior threat-modelling facilitation experience

What you get
  • Central role in a strategically important programme

  • Direct CISO exposure

  • Structured career track — Senior → Staff → Principal

  • Direct recruiter and hiring-manager access — no black-hole applications

  • Structured, timely feedback after every stage

  • Honest guidance on compensation, notice period, and market

  • Onboarding support in the first 30 days after joining

Interview process

Structured, timely, and short.

  1. 01

    Recruiter screen (30 min)

  2. 02

    Technical + scenario (75 min)

  3. 03

    CISO conversation (45 min)

Start the conversation

Hire smarter, build faster, scale further — with one partner.

Book a 30-minute consultation with our enterprise team. We'll send a tailored proposal — costs, capacity, milestones — within 48 hours.