Application Security Engineer

Description

Join Hutech Solutions – Innovate, Lead, and Transform! We are a global AI-driven software services and product engineering powerhouse, founded and led by visionary technology leaders from Walmart. We are redefining the future of technology by building next-gen solutions that empower businesses across Banking, Finance, eCommerce, and Logistics industries. At Hutech, we don’t just build software—we create impact. Our culture fosters innovation, creativity, and continuous learning, enabling our team to push boundaries and solve real-world challenges using cutting-edge AI tools and techniques. Position Summary Experience: 5 Years

Role Overview: We are looking for an experienced Senior Application Security (AppSec) Engineer with strong expertise in application security testing, vulnerability assessment, and secure software development practices. The ideal candidate should possess hands-on experience in identifying and remediating security vulnerabilities across web applications, mobile applications, backend services, and databases.

Key Responsibilities:

• Perform application security assessments, vulnerability analysis, and penetration testing for web, mobile, API, and backend applications.
• Identify, validate, and report security vulnerabilities following industry standards such as OWASP Top 10 and SANS.
• Collaborate with development teams to remediate security findings and implement secure coding practices.
• Develop and automate security testing scenarios and integrate security controls into CI/CD pipelines.
• Conduct source code reviews and security reviews of application architectures.
• Support threat modeling, risk assessments, and security compliance initiatives.

Location: Onsite, Bangalore Job Type: Full-Time

Requirements

Required Skills:

• Strong hands-on experience in Application Security (AppSec), Vulnerability Assessment, and Penetration Testing (VAPT).
• Proficiency in Java or Python with the ability to understand application logic, review code, and develop automation scripts.
• Experience in securing and testing web applications, mobile applications, APIs, backend services, and databases.
• Hands-on experience with security tools such as Burp Suite, OWASP ZAP, SAST, DAST, SCA, and related security testing tools.
• Good understanding of secure SDLC, DevSecOps, authentication, authorization, and common security vulnerabilities.
• Experience in automating security testing processes and integrating security controls into development workflows. Preferred Qualifications:
• Relevant security certifications such as CEH, OSCP, GWAPT, CSSLP, or similar.
• Experience working in Agile/DevSecOps environments.
• Knowledge of cloud security (AWS/Azure/GCP) is a plus.