Senior Application Security Engineer

Overview

Senior Application Security Engineer at DigiCert in Bangalore. Join our security team to drive secure development and application security across the DigiCert product portfolio. This on-site role in Bangalore focuses on protecting customer and internal applications through threat modeling, secure SDLC practices, and hands-on security testing.

Responsibilities

• Perform threat modeling throughout the development lifecycle
• Conduct vulnerability assessments and coordinate remediation
• Implement and maintain SAST/DAST pipelines and security tooling
• Conduct manual penetration testing and code reviews as needed
• Mentor engineers on secure coding practices
• Develop security standards, guidelines, and metrics
• Respond to security incidents and assist with incident response exercises

Qualifications

• 5+ years in application security or related field
• Strong knowledge of OWASP Top 10 and secure coding practices
• Experience with SAST/DAST tools (e.g., SonarQube, Burp Suite, AppScan)
• Proficiency in at least one programming language (e.g., Python, Java, C#)
• Experience with threat modeling methodologies (STRIDE, DREAD)
• Strong communication and collaboration skills
• Bachelor’s degree in Computer Science or related field (or equivalent experience)

About DigiCert

DigiCert delivers trusted digital certificates and PKI solutions to protect people, devices, and data worldwide. The Senior Application Security Engineer will help safeguard the DigiCert platform and customers by integrating security into the development lifecycle.