We use technical cookies and visit statistics: Yandex Metrica and Zorky's own de-identified visit log (cookie zk_aid). We never collect form contents, search text or full IP addresses, and never sell data. Opt out with the button below, or with Global Privacy Control or Do Not Track in your browser. More about cookies and statistics.
Zorky CRMZorky CRM
EN|RU
@termdocs
← All jobs

Principal Cyber Security Test Engineer

principalBengaluru, INScore 62.5/1001d ago
Market insights
📊 Security: salaries and demand on the market
Stack
ci/cdgithubjavanode.jsrails
Show company and link
Free. Sign in with email.
Apply
Upload your CV — we will connect you with the employer directly through our pool.
Send your CV →
Description
Join OneAdvanced We are looking for an experienced application security engineer who will champion a shift-left security philosophy by integrating automated security analysis into CI/CD pipelines, SAST scanning, GitHub Actions, and SCA. To ensure we embed security into the software development lifecycle (SDLC) across the organisation’s .NET, Java, and Node.js technology stacks.This role is also needed to run web application security assessments or penetration tests. What You Will Do Threat Modelling Code reviews Supporting engineering teams with security related design and build issues Reviewing the results from various security code scanning tools Reviewing CI/CD pipeline configurations Create or amend code and generate pull requests for code fixes Reviewing and testing AI integrations and relevant guard rails etc Assisting other members of the team with application security related issues Completing web and desktop security assessments Carrying out risk assessments using the IRAM2 methodology Attending architecture board technical reviews Success Measures: Number of threat models completed Number of penetration tests completed Number of engagements on AI and Software Engineering Projects Number of risk assessments completed What You Will Have 5+ years of experience in application security, software engineering, or DevSecOps. Proven hands-on experience securing applications built with .NET, Java, and Node.js . Demonstrable expertise administering SAST scanning at enterprise
Full description, company and the link to apply — after you sign in. Sign in
Employer contacts (email/phone/telegram) are hidden from the public preview — send your CV, and we will connect you directly.
Urgent question? Message @termdocs