DevSecOps Engineer/ Application Security Engineer

Role & responsibilities

• Perform hands-on development, vulnerability analysis and validation
• Conduct secure code reviews (.NET/APIs/microservices)
• Partner with developers on remediation and secure coding practices
• Support CI/CD security automation(operational ability)
• Participate in AppSec design reviews early in SDLC

Additional Responsibilities

• AI Application Security Responsibilities
• Assess security risks in AI/LLM-enabled applications
• Identify and mitigate: Prompt injection attacks, Data leakage via LLM responses, Insecure plugin/tool integrations
• Support implementation of AI guardrails and usage policies
• Review and validate: Model input/output handling, Sensitive data exposure controls,
• Evaluate third-party AI tools and APIs for security risks
• Support AI governance enforcement across development teams
• Define and implement secure patterns for AI integration in applications

Must have Skills set:

• Strong knowledge of: OWASP Top 10, Secure SDLC practices
• Hands-on experience with: SAST, SCA, API, DAST tools (SonarQube, Black Duck, Burp Suite)
• Strong ability in: Code-level vulnerability triage and validation
• Strong knowledge in powershell/bash automation
• Strong coding skills (recent and hands-on required) .NET / C# / Angular
• Experience with: REST APIs and microservices
• Authentication (OAuth2, SAML, Entra ID)