Senior Application Security Engineer

About the role

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Application Security Engineer based in India.

This is an opportunity to shape application security across a large-scale enterprise technology environment, helping engineering teams build and deploy secure software from the first commit through production. The role focuses on creating scalable security capabilities, automated guardrails, and AI-powered tools that make secure development the default. You will work closely with engineering, architecture, and DevOps leaders, influencing technical roadmaps and driving measurable improvements. Your scope will span secure software development, CI/CD and software supply chain security, API protection, and emerging AI and LLM security practices. Rather than simply identifying vulnerabilities, you will build solutions that prevent recurring risks and enable teams to address threats efficiently. The position is remote, offering the opportunity to collaborate across teams while advancing enterprise-wide cybersecurity practices.

Accountabilities -

Build and scale secure software development lifecycle practices, including secure coding standards, reference architectures, and developer-friendly security guardrails.

-

Develop vulnerability prioritization capabilities across code, pipelines, and deployed services, driving remediation through measurable outcomes.

-

Establish scalable threat modeling practices for applications, APIs, delivery pipelines, RAG architectures, and autonomous AI agents.

-

Architect security controls for CI/CD platforms such as GitHub Actions, Jenkins, GitLab, and Azure DevOps, ensuring security is integrated into pipelines by default.

-

Design and optimize automated SAST, DAST, SCA, and container scanning workflows, improving detection quality and reducing false positives.

-

Automate API discovery, dependency scanning, software bill of materials (SBOM) generation, secrets detection, and other software supply chain security capabilities.

-

Build AI-powered security tools and agent workflows that review pull requests, identify insecure patterns, generate targeted security tests, triage findings, and propose remediation changes for human review.

-

Define security guardrails for AI agents, including least-privilege access, human approval processes, output-quality evaluation, and audit logging.

-

Establish frameworks for secure AI adoption across enterprise applications, addressing data protection, access controls, model inputs and outputs, and misuse prevention.

-

Advise product, platform, and DevOps leaders, translate technical risks into business decisions, select and validate security tools, and demonstrate their impact through metrics.

-

Mentor engineering teams in secure coding and pipeline practices, while helping develop a sustainable Security Champions program.