{"id":1125247,"url":"https://alion.io/job/ramboll-application-security-specialist","title":"Application Security Specialist","company":{"id":690180,"name":"Ramboll","domain":"ramboll.com","url":"https://alion.io/company/ramboll-3","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":77,"open_postings":83,"ghost_share":0,"stale_share":0.904,"repost_share":0,"time_to_fill_p50_days":43,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chennai, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":16500,"max_usd":36000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Acunetix","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Burp Suite","optional":false},{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"Fortify","optional":false},{"name":"GCP","optional":false},{"name":"JavaScript","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Shift-Left","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"Snyk","optional":false},{"name":"SQL","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Agile","optional":true},{"name":"Docker","optional":true},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-09-22T08:32:02Z","employer_posted_date":"2026-09-22","last_verified_at":"2026-10-16T23:30:47Z","board_verified":true,"closed_at":null,"days_open":24,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":24},"description":"About Ramboll\nRamboll is a global leader in sustainable architecture, engineering, and consultancy. At Ramboll Tech, we drive digital transformation across Ramboll, setting the pace for how technology transforms the built environment. Our mission is to become the leading tech-enabled partner for sustainable change.\nIf you are passionate about shaping high-impact digital products and want to connect product strategy with engineering execution, cloud platforms, data, integration and AI-enabled capabilities, this is your opportunity.\nRamboll globally\nRamboll is a leading engineering, architecture and consultancy company. Working at one of our offices in 35 countries you will join 16,000 fellow bright minds in creating innovative and sustainable solutions within Buildings, Transport, Energy, Environment & Health, Architecture, Landscape & Urbanism, Water and Management Consulting. Combining local experience with global knowledge, we help shape the society of tomorrow.\nInviting bright minds\nDo you want to push the boundaries of your profession and develop your excellence in an open, collaborative, and empowering culture? We work to create a sustainable future and our inspiring projects and innovative solutions aim to set the standard among our peers. You will join a global company that has been growing successfully since its founding in 1945. Together, we lead and leave a positive impact on societies, companies, and people around the world.\n Application Security Specialist India\nAre you motivated by turning complex security and compliance risks into clear, decision-ready insights? Do you want to work at the intersection of information security, data compliance and governance in a global organisation? Are you looking to make a tangible impact on how a leading consultancy manages cyber and data-related risks?\nIf this sounds like you, or you’re curious to learn more, then this role could be the perfect opportunity. Join our Information Security and Data Compliance department\nYour new role\nThe Application Security Specialist operates at the intersection of Information Security and Assurance (ISA) and DevSecOps, ensuring that application security is embedded, measurable, and compliant across Ramboll’s global digital landscape and application development.\nThis role focuses on integrating security into engineering workflows while aligning with enterprise security frameworks such as ISO 12207 /ISO/IEC 27001 / CIS 18 and industry best practices like OWASP.\nThe Application Security specialist is responsible for identifying, analyzing, and mitigating security vulnerabilities in applications throughout the software development lifecycle (SDLC). This role works closely with development, DevOps, and security teams to ensure secure coding practices and compliance with organizational and industry standards. You will work closely with RAMTECH, data compliance, regulatory and business teams.\nYour key responsibilities will be:\nAlignment & Assurance\nTranslate security policies into actionable technical controls for development teams\nEnsure alignment with:\nISO/IEC 27001\nCIS Critical Security Controls\nOWASP Top 10\nSupport internal/external audits by providing application security evidence andmetrics\nContribute to risk registers, control effectiveness reviews, and exception handling\nDevSecOps Enablement\nEmbed application security controls into CI/CD pipelines across business units\nDrive adoption ofsecurity-by-design and shift-left security practices\nIntegrate and manage tools for:\noSAST, DAST, SCA, Secrets Scanning\nPartner with DevOps teams to standardize secure pipelines globally\nConfidential.\nApplication Risk Management\nPerform risk-based vulnerability assessments and prioritize remediation\nAlign risk ratings aligned with Cyber and Information security risk methodology\nTrack remediation SLAs and report on risk posture to CISO office.\nConduct threat modeling for critical applications and digital solutions\nSecurity Testing & Validation\nOversee and/or perform:\no Secure code reviews\no Penetration testing (manual & automated)\nValidate vulnerability fixes and ensure closure meets compliance requirements\nEstablish baseline security requirements for all applications\nDeveloper Security Advisory\nAct as a security champion enabler across distributed engineering teams\nProvide secure coding guidance and conduct targeted training sessions\nDevelop reusable secure design patterns and reference architectures.\nMetrics, Reporting & Continuous Improvement\nDefine and track KPIs such as:\no Vulnerability density\no Mean Time to Remediate (MTTR)\no % of applications onboarded to DevSecOps pipelines\nBuild dashboards for leadership visibility and regulatory reporting\nDrive continuous improvement initiatives across global teams\nRequired Skills & Qualifications\nTechnical Skills\nStrong understanding of:\no Web technologies (HTTP, REST APIs, microservices)\no Authentication and authorization mechanisms (OAuth, JWT, SSO)\nKnowledge of common vulnerabilities (e.g., SQL Injection, XSS, CSRF)\nExperience with security tools such as:\no SAST: Checkmarx, Fortify\no DAST: Burp Suite, Acunetix\no SCA: Snyk, Black Duck\nFamiliarity with programming languages (Java, Python, JavaScript, .NET)\nSecurity Knowledge\nHands-on experience with OWASP Top 10 risks\nUnderstanding of threat modeling methodologies\nExperience in bridging policy-to-technical implementation gaps\nKnowledge of cloud security (AWS, Azure, GCP) is a plus\nAbout you\n5+ years in Application Security, Cyber Security, or Software Development\nExperience working in Agile/DevOps environments\nPrior experience in secure coding or vulnerability management preferred\n\nCertifications (Preferred)\nCertified Secure Software Lifecycle Professional (CSSLP)\nOffensive Security Certified Professional (OSCP)\nCertified Information Systems Security Professional (CISSP)\nGIAC Web Application Penetration Tester (GWAPT)\nNice to Have\nExperience with bug bounty programs\nKnowledge of container security (Docker, Kubernetes)\nExperience with Infrastructure as Code (IaC) security tools\nWhat we can offer you\nFlexible work environment with the possibility of working from home.\nCommitment to your professional and personal development.\nLeaders guided by Ramboll’s Leadership Principles.\nA culture that welcomes you as the unique person you are.\nThe long-term thinking of a foundation-owned company.\nReady to join us?\nPlease submit your application and CV online. We invite diversity in all its forms and encourage applicants from all groups to apply.","description_format":"text","description_chars":6515,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Civil & Structural Engineering","Architecture","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-09-22T21:08:21Z"}],"visa":[],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.595,"p_room":0.9,"age_days":23,"expected_fill_days":43,"reasons":["conf:3","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/ramboll-application-security-specialist","json_url":"https://alion.io/job/ramboll-application-security-specialist.json","meta":{"generated_at":"2026-10-17T02:32:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3476,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":690180},"rest":"https://alion.io/mcp/rest/get_company?id=690180"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Framboll-application-security-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Framboll-application-security-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Framboll-application-security-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ramboll-application-security-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Framboll-application-security-specialist"}]}