Application Security Engineer

Job Title: Application Security Engineer
Experience Range: 10+ Years
Work Location:Remote, India
Job Type: Contract
We re hiring for one of the top IT services companies.
SPADTEK Solutions is proud to collaborate with leading IT organizations to source exceptional talent for their Contracts & full-time positions.
Client/Implementation Partner is a globally recognized IT services and consulting company, trusted by Fortune 500 clients and enterprises worldwide. With a strong presence across cloud, data engineering, AI, and digital transformation and is known for delivering cutting-edge solutions that drive business growth and innovation.
Working on enterprise-scale projects with global clients.
Exposure to next-gen technologies across cloud, data, and digital platforms.
A culture that values continuous learning, collaboration, and career growth.
Being part of a company consistently ranked among the top IT employers.
If you are an experienced professional seeking a long-term career opportunity with one of the industry s most respected names, this is your chance to join top IT services company through SPADTEK Solutions.
Key Responsibilities
Perform hands-on application security engineering, vulnerability analysis, and validation activities.
Conduct secure code reviews for .NET, C#, APIs, and microservices.
Partner closely with development teams to remediate vulnerabilities and promote secure coding practices.
Support and enhance CI/CD security automation and operational security controls.
Participate in application security architecture and design reviews throughout the SDLC.
Assess security risks associated with AI and LLM-enabled applications.
Identify and mitigate AI-specific threats including prompt injection, data leakage, and insecure plugin or tool integrations.
Review and validate model input/output handling and sensitive data exposure controls.
Evaluate third-party AI platforms, APIs, and integrations for security risks.
Support AI governance initiatives, security policies, and guardrail implementation.
Define and implement secure patterns for AI integration across enterprise applications.
Essential Skills
10+ years of experience in Application Security and Secure Development.
Proven hands-on engineering background with recent coding experience.
Strong knowledge of OWASP Top 10 and Secure SDLC practices.
Hands-on experience with SAST, SCA, DAST, and API security testing tools such as SonarQube, Black Duck, and Burp Suite.
Expertise in code-level vulnerability triage, validation, and remediation.
Strong development experience with .NET, C#, and Angular.
Proficiency in PowerShell and Bash scripting and automation.
Experience securing REST APIs and microservices-based architectures.
Strong understanding of authentication and identity technologies including OAuth2, SAML, and Entra ID.
Demonstrated ability to collaborate with development teams to analyze, prioritize, and remediate security vulnerabilities.
Experience supporting security reviews and secure design practices throughout the software development lifecycle.
Good To Have Skills
Knowledge of MCP Servers, Agentic AI, and secure AI application frameworks.
Experience with CI/CD security pipeline automation and security gate implementation.
Container and platform security experience, preferably Kubernetes and OpenShift.
Experience with CyberArk, Conjur, Vault, and enterprise secrets management solutions.
Azure and Entra ID security expertise.
Knowledge of RBAC, identity flows, certificate management, and credential handling.
Experience with API security tools and penetration test validation workflows.
Exposure to AI governance frameworks, policy enforcement, and AI threat modeling methodologies.
Experience with Secure AI SDLC frameworks and automated security enforcement controls.
Relevant certifications such as CSSLP, OSCP, GWAPT, or AI/Cloud Security certifications.

Work arrangement
Yes