Application Security Engineer

Dear Candidate,

Sonata software is looking for Application security engineer for Hyderabad location.

Interested candidates with suitable experience can share your resume to Ybalakrishnan@sonata-software.com

Required Skills

• Strong knowledge of information security best practices as they relate to application development.
  
• Ability to work independently as well as collaboratively within cross-disciplinary teams.
  
• Highly organized, persistent, and attentive to detail, with excellent written and verbal communication skills.
  
• Experienced in both technical and narrative writing.
  
• Advanced assessment and report-writing capabilities.
  
• Effective communicator through email, messaging platforms, and global virtual meetings.
  
• Skilled in developing strategies to identify, mitigate, and respond to potential security threats.
  
• Broad understanding of software systems, their interactions, and their interfaces with external entities and customers.
  
• Skilled in providing mentorship and guidance on application security best practices.
  
• Knowledge of compliance frameworks and security standards, including

  PCI DSS

  .
• Skilled in securing and working with

  containerized environments

  (Docker, container orchestration concepts, etc.).

Education & Experience

• 3+ years of experience in web and software development.
  
• Hands-on experience securing applications and implementing industry-standard security best practices.
  
• Experience working with

  PCI DSS requirements

  , assessments, and remediation activities.
• Knowledgeable in OWASP Top 10 and corresponding remediation techniques.
  
• Experienced in performing application security assessments and communicating results to stakeholders.
  
• Proficient with multiple programming languages and frameworks, including PHP, Ruby, Python, Java, HTML, and CSS.
  
• Experience with ticketing and case-management systems.
  
• Skilled with static and dynamic code analysis tools.
  
• Familiar with penetration testing tools, workflows, and methodologies.
  
• Experience with forensic analysis tools and reverse-engineering techniques.
  
• Understanding of on-premise and cloud-based network architectures.
  
• Hands-on experience with

  containers

  , including Docker and container-based development workflows; understanding of container security considerations.

Regards

Yamini