{"id":2041875,"url":"https://alion.io/job/digicert-application-security-engineer","title":"Application Security Engineer","company":{"id":20716,"name":"Digicert","domain":"digicert.com","url":"https://alion.io/company/digicert","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":89,"open_postings":7,"ghost_share":0,"stale_share":0.429,"repost_share":0,"time_to_fill_p50_days":38,"computed_at":"2026-10-10T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":13000,"max_usd":37000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":462},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"DNS","optional":true},{"name":"GCP","optional":true},{"name":"GitHub Actions","optional":true},{"name":"GitLab CI","optional":true},{"name":"ISO 27001","optional":true},{"name":"JavaScript","optional":true},{"name":"Jenkins","optional":true},{"name":"OWASP SAMM","optional":true},{"name":"PCI DSS","optional":true},{"name":"PKI","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2025-11-12T11:11:03Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-11T22:32:14Z","board_verified":true,"closed_at":null,"days_open":333,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":332},"description":"Who we are\nDigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at www.digicert.com\nJob summary\nAs an Application Security Engineer within our cybersecurity team, you will help safeguard the company’s web applications and services by supporting the integration of security practices into the Software Development Life Cycle (SDLC). You will collaborate with development, DevOps, and security teams to identify, assess, and remediate vulnerabilities, contribute to secure coding practices, and assist in implementing DevSecOps tooling and processes. This role is ideal for someone with a strong technical foundation who is eager to grow within the product/application security space.\nWhat you will do\nSupport the integration of security controls and best practices across various phases of the SDLC.\nAssist in security assessments, including static and dynamic code analysis, open-source dependency analysis, and limited penetration testing.\nParticipate in manual and automated code reviews to identify potential vulnerabilities and coding flaws.\nCollaborate with software engineers to promote secure development practices, including the use of security testing tools in CI/CD pipelines.\nContribute to the evaluation, deployment, and tuning of DevSecOps tools such as SAST, DAST, and SCA platforms.\nHelp maintain secure deployment workflows and support security automation efforts.\nParticipate in cross-functional security reviews of new features and systems with guidance from senior engineers.\nStay up to date on current security threats, vulnerabilities, and best practices in application security.\nAssist with triaging vulnerabilities from internal scans, bug bounty submissions, or external assessments.\nDocument processes and playbooks to support consistent and scalable security practices.\nProvide input to the development of internal security standards and reference architectures.\nSupport remediation efforts in collaboration with engineering teams.\nParticipate in promoting a security-first culture across the organization.\nOther duties and responsibilities as assigned.\nWhat you will have\nBachelor’s degree in computer science, cybersecurity, or a related technical field.\n2+ years of experience in cybersecurity, software engineering, or DevOps, with at least 1+ years focused on application or product security\nSolid understanding of common web application vulnerabilities (e.g., OWASP Top 10, CWE) and remediation strategies.\nFamiliarity with DevSecOps tools (SAST, DAST, SCA) and secure SDLC methodologies. - nice to have if they have a solid understanding of common web application vulnerabilities (e.g., OWASP Top 10, CWE).\nAbility to analyze code and spot security issues with guidance.\nStrong communication and collaboration skills.\nStrong attention to detail and willingness to learn new technologies.\nNice to have\nHands-on experience with CI/CD pipelines (e.g., GitHub Actions, GitLab CI, Jenkins).\nExperience with programming/scripting languages such as Python, JavaScript, or Java.\nFamiliarity with security standards and frameworks such as NIST, OWASP SAMM, ISO 27001, or PCI DSS.\nExperience working in a regulated environment (e.g., financial services, healthcare, or government).\nProfessional certifications such as Security+, CEH, eJPT, or equivalent (OSCP or similar preferred but not required).\nExposure to cloud platforms such as AWS, Azure, or GCP.\nExperience contributing to or managing a bug bounty triage process.\nBenefits\nGenerous time off policies\nTop shelf benefits\nEducation, wellness and lifestyle support\nTo protect candidate information and maintain a secure hiring process, all applications must be submitted through our careers portal. Resumes or CVs sent directly via email will not be reviewed or considered.","description_format":"text","description_chars":4178,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security"],"lifecycle":[{"event":"open","at":"2026-10-07T18:09:27Z"}],"visa":[],"liveness":{"score":3,"band":"cold","label":"Long shot","p_open":1,"p_active":0.108,"p_room":0.28,"age_days":331,"expected_fill_days":38,"reasons":["conf:1","velocity","win:tail","crowd:junior"],"computed_at":"2026-10-10T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/digicert-application-security-engineer","json_url":"https://alion.io/job/digicert-application-security-engineer.json","meta":{"generated_at":"2026-10-11T23:09:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13767,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":20716},"rest":"https://alion.io/mcp/rest/get_company?id=20716"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdigicert-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdigicert-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdigicert-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/digicert-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdigicert-application-security-engineer"}]}