{"id":4312745,"url":"https://alion.io/job/willware-technologies-application-security-engineer","title":"Application Security Engineer","company":{"id":3800624,"name":"Willware Technologies","domain":"willwaretech.com","url":"https://alion.io/company/willware-technologies","size_band":"51-200","is_staffing_agency":false,"employer_type":"staffing","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"API Gateway","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"Go","optional":false},{"name":"JavaScript","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Azure","optional":true}],"status":"live","first_seen_at":"2026-11-14T06:44:54Z","employer_posted_date":null,"last_verified_at":"2026-11-14T06:44:54Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"Job Title : Application Security / AppSec Engineer.\n\nWork Location : Bengaluru Millenia.\n\nStrategic Business Unit (SBU) : Risk Consulting.\n\nSub-SBU : Financial Services.\n\nCategory : Global Capability Center (GCC) Role Overview. We are looking for a skilled and collaborative Application Security / AppSec Engineer to establish and operate a comprehensive enterprise application security program.\n\nIn this role within our Risk Consulting Cyber practice, you will embed security seamlessly into the software development lifecycle (SDLC), champion DevSecOps automation, and secure critical applications, APIs, and microservices across cloud-native environments.\n\nNote : Exceptional English communication skills (written and verbal) are a mandatory requirement for this role to effectively conduct architecture reviews, deliver developer enablement workshops, and consult with global engineering teams.\n\nKey Responsibilities :\n\n- Secure SDLC Governance : Establish, mature, and evangelize secure SDLC practices across engineering teams.\n\n- DevSecOps Integration : Seamlessly integrate SAST, DAST, SCA, secrets scanning, and container security tools into CI/CD pipelines.\n\n- Threat Modeling & Architecture : Conduct thorough application threat modeling and security architecture reviews for complex software designs.\n\n- Vulnerability Mitigation : Identify and remediate vulnerabilities mapped to the OWASP Top 10 and critical API security risks.\n\n- Lifecycle Management : Manage the end-to-end application vulnerability lifecycle, triage findings, and drive prompt remediation.\n\n- CI/CD Quality Gates : Define automated security gates and implement risk-based vulnerability prioritization metrics within deployment pipelines.\n\n- Penetration Testing Support : Support internal and external penetration testing efforts and validate the remediation of discovered findings.\n\n- Supply Chain Security : Establish robust software supply-chain security controls, dependency tracking, and artifact integrity checks.\n\n- Container & Cloud Security : Provide security guidance for container images, registries, and Kubernetes deployments.\n\n- Standards & Enablement : Develop AppSec standards, code policies, and developer guidance; deliver developer security training and enablement.\n\n- Emerging Tech : Support the secure design and deployment of AI-enabled applications.\n\nRequired Skills & Experience :\n\n- Experience : 5 to 8 years of hands-on experience in application security, product security, or software engineering with a strong security focus.\n\n- Core Frameworks : Deep expertise in the OWASP Top 10, OWASP API Security Top 10, and secure coding practices.\n\n- AppSec Tooling : Proven experience configuring and running SAST, DAST, and SCA tools.\n\n- CI/CD & Version Control : Extensive familiarity with modern CI/CD tools (e.g., GitLab CI, GitHub Actions, Azure DevOps, Jenkins) and repository management.\n\n- Environment Protection : Hands-on knowledge of container security, Kubernetes, and API gateway security.\n\n- Technical Background : Strong software development or scripting background (e.g., Python, Java, JavaScript, Go) to effectively review code and build automation scripts.\n\n- Communication : Extraordinary English communication skills (both verbal and written), with the ability to bridge the gap between deep technical risk and developer workflows.\n\nPreferred Certifications : Industry-recognized application security certifications including :\n\n- CSSLP (Certified Secure Software Lifecycle Professional).\n\n- GWAPT (GIAC Web Application Penetration Tester).\n\n- OSCP (Offensive Security Certified Professional).\n\n- CEH (Certified Ethical Hacker).\n\n- Or equivalent application security credentials.\n\nExpected Deliverables & Outcomes :\n\n- A fully documented and operational Secure SDLC framework.\n\n- End-to-end integration of automated security testing tools within CI/CD pipelines.\n\n- Real-time AppSec risk and vulnerability dashboards.\n\n- Comprehensive application threat models and data-flow diagrams.\n\n- A streamlined and measurable vulnerability remediation program.\n\n- Rigorous API security assessment reports.\n\n- Regular developer security enablement sessions and secure coding training modules.\nSkills\nSecurity, Applications Security, Security Risk Management, DevSecOps, SAST, DAST, Vulnerability Management, Penetration Testing, OWASP, Cloud Security, OSCP","description_format":"text","description_chars":4368,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Custom Software Development","IT Staffing & Staff Augmentation"],"lifecycle":[{"event":"open","at":"2026-11-14T13:10:15Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":44,"reasons":["seen:0","win:early","comp:brand"],"computed_at":"2026-11-14T15:48:24Z"},"pay":null,"html_url":"https://alion.io/job/willware-technologies-application-security-engineer","json_url":"https://alion.io/job/willware-technologies-application-security-engineer.json","meta":{"generated_at":"2026-11-14T15:48:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17634,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3800624},"rest":"https://alion.io/mcp/rest/get_company?id=3800624"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwillware-technologies-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwillware-technologies-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwillware-technologies-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/willware-technologies-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwillware-technologies-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4312745}},{"tool":"search_jobs","arguments":{"company":"willwaretech.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4312745},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}