Application Security Engineer Jobs in Chennai Cyber Security Company

📋 Job Description

Jobzi is sourcing qualified candidates for Application Security Engineer positions in Chennai's private Cyber Security Company sector. This is a full-time opportunity with a reputed Cyber Security and Information Security employer in Chennai offering competitive salary, structured growth, and a professional work environment. Tamil communication skills are preferred alongside English for professional and business interaction in Chennai.

📌 Key Responsibilities

• Conduct application security assessments including manual code reviews, SAST scans, DAST testing, and API security testing for client web and mobile applications.
• Integrate Static Application Security Testing (SAST) tools such as Checkmarx, Veracode, or SonarQube into client CI/CD pipelines to enable automated vulnerability detection.
• Perform Dynamic Application Security Testing (DAST) using OWASP ZAP, Burp Suite, or similar tools to identify runtime vulnerabilities in web applications and APIs.
• Conduct threat modelling exercises using the STRIDE methodology to identify architectural security flaws in new features and system designs before development begins.
• Deliver secure coding training and awareness sessions to client development teams covering OWASP Top 10 vulnerabilities and secure coding practices for their technology stack.
• Review and advise on security requirements, design patterns, and control implementations for applications handling sensitive personal, financial, or health data.
• Produce application security assessment reports with prioritised vulnerability findings, risk ratings, code-level remediation guidance, and verification retesting plans.

🎓 Qualifications and Requirements

• B.E. or B.Tech in Computer Science or Information Technology with two to six years of application security, software development, or security testing experience.
• Deep familiarity with the OWASP Top 10 vulnerabilities and ability to identify, demonstrate, and advise on remediation of each class of vulnerability across different technology stacks.
• Hands-on experience with SAST tools (Checkmarx, Veracode, or SonarQube) and the ability to triage, contextualise, and present SAST findings to development teams.
• Proficiency with DAST tools such as OWASP ZAP and Burp Suite Professional for web application and API security testing engagements.
• Experience with threat modelling methodologies such as STRIDE or PASTA, and ability to conduct threat modelling sessions with product and engineering teams.
• Prior software development experience in any common language (Java, Python, Node.js, .NET) is a strong advantage for meaningful secure code review.
• Relevant certifications such as GWEB (GIAC Web Application Penetration Tester), CSSLP (Certified Secure Software Lifecycle Professional), or OSWE are valued for senior AppSec roles.
• Good Tamil and English communication skills for team coordination and client interaction in Chennai.

✅ Required Skills