{"id":3350656,"url":"https://alion.io/job/concentrix-sr-engineer-application-security","title":"Sr. Engineer: Application Security","company":{"id":84,"name":"Concentrix","domain":"concentrix.com","url":"https://alion.io/company/concentrix","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"C","score":65,"open_postings":986,"ghost_share":0.58,"stale_share":0,"repost_share":0.007,"time_to_fill_p50_days":26,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":12500,"max_usd":27000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"C#","optional":false},{"name":"CI/CD","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab","optional":false},{"name":"JavaScript","optional":false},{"name":"Jenkins","optional":false},{"name":"Jira","optional":false},{"name":"Kubernetes","optional":false},{"name":"Node JS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"STRIDE","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Ansible","optional":true},{"name":"OWASP ASVS","optional":true},{"name":"StackHawk","optional":true},{"name":"Terraform","optional":true}],"status":"closed","first_seen_at":"2026-10-27T18:24:35Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-11-01T05:15:27Z","board_verified":false,"closed_at":"2026-11-01T05:15:27Z","days_open":4,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":3},"description":"Job Title:\nSr. Engineer: Application SecurityJob Description\nWe're Concentrix. The intelligent transformation partner. Solution-focused. Tech-powered. Intelligence-fueled.The global technology and services leader that powers the world’s best brands, today and into the future. We’re solution-focused, tech-powered, intelligence-fueled. With unique data and insights, deep industry expertise, and advanced technology solutions, we’re the intelligent transformation partner that powers a world that works, helping companies become refreshingly simple to work, interact, and transact with. We shape new game-changing careers in over 70 countries, attracting the best talent.\nThe Concentrix Technical Products and Services team is the driving force behind Concentrix’s transformation, data, and technology services. We integrate world-class digital engineering, creativity, and a deep understanding of human behavior to find and unlock value through tech-powered and intelligence-fueled experiences. We combine human-centered design, powerful data, and strong tech to accelerate transformation at scale. You will be surrounded by the best in the world providing market leading technology and insights to modernize and simplify the customer experience. Within our professional services team, you will deliver strategic consulting, design, advisory services, market research, and contact center analytics that deliver insights to improve outcomes and value for our clients. Hence achieving our vision.\nOur game-changers around the world have devoted their careers to ensuring every relationship is exceptional. And we’re proud to be recognized with awards such as \"World's Best Workplaces,\" “Best Companies for Career Growth,” and “Best Company Culture,” year after year.\nJoin us and be part of this journey towards greater opportunities and brighter futures.\nV - Sr. Engineer: Application Security Position: Senior Security Engineer - AppSec Department: 9909153 - IT Mountain Applications \nJob Summary: The Senior Application Security Engineer acts as the bridge between Information Security and our Software Development teams. This role is responsible for securing the Software Development Life Cycle (SDLC) by integrating security tooling directly into CI/CD pipelines and performing technical security assessments on proprietary applications. \nCrucially, this role is a cultural leader. You will build and nurture a \"Security Champions\" program, empowering developers to take ownership of security within their own products. You are not just finding bugs; you are teaching teams how to build secure code by design, fostering a partnership based on trust and mutual goals. \nWho you are: \nDeveloper-Centric: You think like a developer because you have been one. You understand the pressure of sprint deadlines and strive to make security \"frictionless.\" \nRelationship Builder: You know that the best way to secure software is to have the developers on your side. You approach vulnerability discussions with empathy and a \"how do we fix this together\" attitude. \nCurious & Technical: You love digging into code logic to find the flaw that automated scanners missed. \nTeacher & Mentor: You enjoy explaining why a Cross-Site Scripting (XSS) vulnerability is dangerous and demonstrating how to write the code to prevent it. \nPragmatic: You can distinguish between a theoretical risk and a practical exploit, helping business leaders make informed shipping decisions. \nResponsibilities include: \nSecurity Champions Program: Help to launch, and manage a formal Security Champions program. Identify key advocates within development teams, provide them with advanced training, and build a community of practice. \nSecure SDLC (DevSecOps): Engineer and maintain the integration of security testing tools (SAST, DAST, SCA) into the CI/CD pipeline (e.g., Azure DevOps, Jenkins, GitLab) to provide rapid feedback to developers. \nApplication Security Testing: Conduct manual and automated penetration tests and code reviews on web applications, APIs, and mobile apps prior to release. \nThreat Modeling: Partner with engineering teams during the architecture/design phase to perform threat modeling (STRIDE/PASTA), identifying design flaws before code is even written. \nVulnerability Management (AppSec): Triaging results from application scans, removing false positives, and creating clear, actionable Jira tickets for engineering teams. \nDeveloper Training: Create and deliver secure coding training (e.g., OWASP Top 10) tailored to the specific technology stacks used by the organization. \nTool Engineering: Evaluate application security technologies and their reports (e.g., Stackhawk, or Qualys WAS). \nPolicy & Standards: Assist in developing application security standards and coding guidelines that align with industry frameworks (ASVS, NIST). Experience you’ll need: \nBachelor’s degree in computer science, software engineering, information security, or equivalent experience.\nDevelopment Background: Significant experience in software development or scripting (e.g., Java, .NET/C#, Python, JavaScript/Node.js). You must be able to read and understand the code you are securing. \nAppSec Expertise: Deep understanding of the OWASP Top 10, SANS 25, and common attack vectors (SQLi, XSS, CSRF, IDOR) and their remediations. \nPipeline Engineering: Hands-on experience integrating security tools into CI/CD pipelines (Azure DevOps, GitHub Actions, Jenkins). \nTool Proficiency: Experience with SAST (Static Analysis), DAST (Dynamic Analysis), and SCA (Software Composition Analysis) tools. \nCultural Leadership: Demonstrated experience building relationships with development teams or leading \"Security Champions\" initiatives. \nAPI Security: Strong understanding of API security, JSON Web Tokens (JWT), and API gateways. \nCommunication: Ability to explain complex security exploits to non-security audiences and influence stakeholders to prioritize technical debt. \nCloud Native Security: Familiarity with securing cloud-native applications (containers, Kubernetes, Serverless) in AWS or Azure. Preferred Experience: \nCertifications: CASE (Certified Application Security Engineer), CSSLP, GWEB, or OSCP (Offensive Security Certified Professional). \nExperience with Qualys Web App Scanning (WAS) module. \nExperience with \"Infrastructure as Code\" (IaC) security scanning (e.g., Terraform, Ansible). \nContribution to open-source security projects or bug bounty programs.\nLocation:\nIND Hyderabad Raidurg Village B7 South Tower, Serilingampally Mandal Divya Sree OrionLanguage Requirements:\nTime Type:\nFull time","description_format":"text","description_chars":6589,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Business Process Outsourcing (BPO)","Call Center Services"],"lifecycle":[{"event":"open","at":"2026-10-27T18:24:35Z"},{"event":"close","at":"2026-11-01T05:15:27Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/concentrix-sr-engineer-application-security","json_url":"https://alion.io/job/concentrix-sr-engineer-application-security.json","meta":{"generated_at":"2026-11-01T14:26:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22111,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":84},"rest":"https://alion.io/mcp/rest/get_company?id=84"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fconcentrix-sr-engineer-application-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fconcentrix-sr-engineer-application-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fconcentrix-sr-engineer-application-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/concentrix-sr-engineer-application-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fconcentrix-sr-engineer-application-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3350656}},{"tool":"search_jobs","arguments":{"company":"concentrix.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3350656},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}