Appsec Consultant

About The Opportunity

A fast-growing cybersecurity services firm based in India, we partner with enterprises to harden their digital infrastructure against evolving threats. Our AppSec engineers design, implement, and automate security controls across the SDLC—ensuring secure code, resilient architectures, and compliance readiness for clients in fintech, healthcare, and SaaS verticals. We operate from our on-site engineering hubs, delivering high-impact AppSec strategy and execution with agility and precision. Role & Responsibilities

• Conduct secure code reviews and SAST/DAST scans across Java, Python, Node.js, and .NET applications.
• Integrate AppSec tooling (Snyk, Checkmarx, SonarQube, Burp Suite) into CI/CD pipelines for shift-left security.
• Perform threat modeling sessions and architecture risk assessments for new product features.
• Collaborate with DevOps and Dev teams to remediate critical vulnerabilities and enforce security gates.
• Document and maintain AppSec policies, standards, and checklists aligned with OWASP, NIST, and ISO 27001.
• Deliver AppSec training and awareness workshops to engineering teams across client projects.
  
  

Skills & Qualifications

Must-Have

• OWASP Top 10
• SAST
• DAST
• Checkmarx
• Snyk
• Burp Suite
• CI/CD Security Integration
• Threat Modeling
  
  

Preferred

• Fortify
• AppScan
• ISO 27001 Lead Auditor
  
  

Benefits & Culture Highlights

• Work from dedicated on-site security labs with latest tools and sandbox environments.
• Grow fast—own security initiatives for Fortune 500 clients and earn AppSec certifications sponsored by us.
• Flexible work culture with zero burnout—structured sprints, no weekend work, and quarterly security hackathons.
  
  

Skills: owasp,burp suite,security