Cyber Security Specialist

About Coforge

Coforge is a global digital services and solutions organization, delivering transformative technology solutions across industries including Banking, Insurance, Travel, Healthcare, and Public Sector. With a strong focus on innovation, cloud, cybersecurity, and digital transformation, Coforge empowers enterprises to stay ahead in a rapidly evolving digital landscape.

Role Summary

We are looking for a highly motivated Application Security Engineer with experience in application security testing, vulnerability assessment, and security tool integration. The ideal candidate should have a strong understanding of web applications, APIs, cloud environments, and secure software development practices.

Key Responsibilities

• Conduct manual and automated application security assessments and vulnerability scans.
• Support and manage Application Security tools including SAST, DAST, SCA, API Security, and CI/CD security integrations.
• Identify, analyze, and remediate security vulnerabilities across applications and cloud environments.
• Collaborate with development teams to embed security throughout the software development lifecycle (SDLC).
• Contribute to the development of new product features, enhancements, and technology improvements.
• Perform security testing and validation using industry-standard tools and frameworks.
• Prepare security assessment reports and recommend remediation strategies.

Required Skills

• Good understanding of Web Applications, APIs, and Cloud Security concepts.
• Hands-on experience with security tools such as:
• Checkmarx
• Fortify
• Burp Suite
• Nessus / Tenable.io
• Kali Linux
• Nmap
• Metasploit
• Wireshark
• Experience with Application Security Testing (SAST, DAST, SCA, API Security).
• Familiarity with DevSecOps practices and CI/CD pipeline security integration.
• Strong problem-solving, troubleshooting, and debugging skills.
• Self-driven, flexible, and collaborative approach to work.

Good to Have

• Knowledge of OWASP Top 10 and secure coding practices.
• Experience with cloud platforms such as AWS, Azure, or GCP.
• Understanding of container and Kubernetes security.
• Relevant security certifications such as CEH, Security+, GWAPT, CSSLP, or OSCP.
• Knowledge of scripting or automation using Python, PowerShell, or Bash.

Experience: 3–8 Years

Employment Type: Full-Time

Connect on [email protected] for more insights