Application Security Expert(RARR Job 5010)

We are looking for a highly skilled and experienced Application Security Expert to join our team. The ideal candidate will have a minimum of 5 years of proven experience in Application Security, with a strong focus on SAST, DAST, Penetration Testing, Source Code Reviews, and Red Team Assessments.

The candidate should have a strong understanding of secure coding practices and vulnerability management, and must be capable of identifying, assessing, and mitigating security vulnerabilities in applications.

Responsibilities

• Perform vulnerability assessments and penetration testing (VAPT) of web, mobile, and API-based applications.

• Conduct SAST and DAST to detect vulnerabilities at both code and runtime levels.

• Perform detailed source code reviews to identify security flaws and ensure secure coding practices.

• Conduct Red Team Assessments to simulate real-world attack scenarios and uncover security weaknesses.

• Perform threat modeling and risk analysis for applications.

• Collaborate with development, QA, and DevOps teams to integrate security best practices across the SDLC.

• Recommend and guide teams on secure coding standards and remediation techniques.

• Conduct security testing and provide detailed reports with risk-based prioritization.

• Develop, review, and maintain application security policies, standards, and procedures.

• Provide training and awareness on application security best practices to internal teams.

• Stay updated on the latest security threats, vulnerabilities, and tools in the AppSec domain.