Application Security Engineer
DigiCert is seeking an Application Security Engineer to join their cybersecurity team in Bengaluru. The role focuses on integrating security into the SDLC, performing code reviews, and managing DevSecOps tools to safeguard web applications. Candidates should have a background in software engineering or security with proficiency in Python, Java, or JavaScript. The position offers an opportunity to work at scale for a global trust platform and grow within the AppSec domain.
50k new jobs listed every day. Install TAL to find more jobs like this.
Experience
2+ years
Function
Engineering
Work mode
Onsite, India
Company
Tier 2
What you will work on
DigiCert is seeking an Application Security Engineer to join their cybersecurity team in Bengaluru. The role focuses on integrating security into the SDLC, performing code reviews, and managing DevSecOps tools to safeguard web applications. Candidates should have a background in software engineering or security with proficiency in Python, Java, or JavaScript. The position offers an opportunity to work at scale for a global trust platform and grow within the AppSec domain.
TAL's take
Solid role at a well-known global cybersecurity firm with clear responsibilities and career growth potential in AppSec.
The JD is well-structured, providing a clear breakdown of responsibilities and technical expectations for an application security role.
Salaries at DigiCert
40.4 LPA average
Based on 1 Grapevine salary entries for DigiCert.
Other roles
6 - 8 years | L9
40 LPA average
Range: 40 - 40 LPA
Must haves
- Bachelor’s degree in computer science or related field
- 2+ years experience in cybersecurity, software engineering, or DevOps
- 1+ years focused on application or product security
- Experience with Python, JavaScript, or Java
- Familiarity with DevSecOps tools (SAST, DAST, SCA)
- Understanding of OWASP Top 10 and CWE
Tools and skills
Nice to have: github actions, gitlab ci, jenkins, nist, owasp samm, iso 27001, pci dss, aws, azure, gcp.
About the company
Global established security company, but not a Tier-1 tech giant in terms of engineering prestige.