Phenom•13h ago
Foundit
Application Security Engineer
Hyderabad
Full Time
Senior Level
Full Job Description
Phenom seeks an **Application Security Engineer** to drive the security posture of the ITX Platform by identifying, analyzing, and mitigating vulnerabilities. You will conduct thorough vulnerability research, triage, and reporting while collaborating with engineering teams to implement shift-left security practices. Key responsibilities include:
- Research, analyze, and triage vulnerabilities in Phenom’s ITX Platform, assessing severity, exploitability, and remediation recommendations.
- Collaborate with engineering teams to evolve software assurance processes and adopt security-by-default principles.
- Deploy and optimize SAST/DAST/SCA tools to detect and communicate security risks to production teams.
- Maintain vulnerability tracking, escalate issues, and ensure alignment with Phenom’s security standards.
- Work with business, support, and production teams to develop remediation strategies and improve security workflows.
- Prepare technical reports and communicate findings to leadership and peers using clear, concise writing.
- Drive compliance improvements by managing vulnerability audits, threat modeling (STRIDE/PASTA), and cybersecurity frameworks (OWASP, CVSS).
- Stay updated on emerging threats, attack techniques, and cybersecurity best practices to enhance Phenom’s threat model.
- Support the deployment of Phenom’s Secure Architecture & Software Development program, ensuring alignment with business goals.
- Identify process improvements, automate security workflows, and measure key cybersecurity metrics for continuous enhancement.
- Conduct training on the Security Development Lifecycle (SDL) for engineering teams.
**Qualifications:**
- Proven experience with AWS cloud security controls and microservices architectures in SaaS environments.
- Strong proficiency in scripting/programming (Python, Java, Terraform) and cybersecurity tools (SIEM, IPS, XDR).
- Deep knowledge of SAST/DAST, threat modeling (STRIDE, PASTA), and vulnerability frameworks.
- Experience managing vulnerability programs, threat intelligence, and cyber risk assessments.
- Critical thinking, organizational skills, and ability to prioritize high-impact security tasks.
Company
Phenom
Phenom, a leading innovator in secure software solutions, specializes in building highly resilient ITX Platforms for enterprise-grade applications. With a strong focus on cybersecurity, Phenom integra...
Hyderabad
Posted on Foundit