Senior Application Security Engineer

Application Security Engineer

Location: Yerwada, Pune

Mode: Hybrid

Primary responsibilities:

• Collaborate across cross-functional teams (business stakeholders, application BSAs, Information security and infrastructure teams) to proactively identify and reduce security vulnerabilities, with a target reduction of 50% across business applications.
• Conduct Tenable vulnerability scans to identify security gaps, generate detailed reports, and evaluate findings both before and after remediation activities.
• Execute security remediation initiatives by applying application and infrastructure patches, implementing configuration changes, and coordinating end-to-end testing with relevant stakeholders.
• Implement Remediations ensuring optimal system performance, reliability, accuracy, and security, without impacting business users.
• Root Cause Analysis to determine root cause of security vulnerabilities and implement corrective actions to remediate.
• Enforce and uphold IT security policies and standards, ensuring compliance and protection of applications, supporting infrastructure, and enterprise data assets.

Success Behaviors:

• Understand how to apply patches & configuration changes across technology portfolio to reduce potential vulnerabilities.
• Ensure remediations maintains high availability for all applications, reduce/eliminate system outages, optimize changes with least user impact outage windows.
• Understand enterprise scale, integrated applications from a process and business perspective.
• Understands and can articulate how solutions align to the internal needs.
• Receives positive Customer feedback from leadership, teams, and peers.
• Escalates appropriately for issues impacting stakeholders, project delivery or customer satisfaction, following internal process and policy.

Qualifications/Experience/Certifications

• Minimum of 5 years of experience in application infrastructure, with strong technical expertise and hands-on experience in vulnerability remediation.
• Relevant certifications such as Tenable Certified (preferred), CISSP, CEH, or Security+
• Proven ability to analyze security vulnerabilities, assess risk, and evaluate business and technical impact.
• Strong background in system architecture, including process workflows and operational support models.
• Experience supporting large-scale enterprise environments, including networks, storage, identity management, disaster recovery, and application security.
• Track record of defining and executing application upgrades, patching, and operational optimization initiatives.
• Strong collaboration skills with application, network, and security teams to troubleshoot issues and perform impact assessments.
• Hands-on experience designing, deploying, and managing enterprise application infrastructure across Linux, Windows, AIX, and AWS environments, ensuring high availability (24x7) and supporting on-call rotations.
• Excellent communication and interpersonal skills, with the ability to effectively collaborate in multicultural and globally distributed teams.

Preferred Technology Exposure

• Security - Tenable
• Operating Systems- Linux, Windows, AIX
• Authentication applications – Okta SSO, LDAP, Active Directory.
• Application & Web Servers - JBoss EAP, Tomcat & Apache HTTP.
• SCM- GitHub
• CI - Jenkins, GitHub Actions
• Testing- SmartBear Test Complete, Ready API or similar