Application Security Engineer – SAST/DAST & Security Tooling Outage Support

Do you love a career where you Experience, Grow & Contribute at the same time, while earning at least 10% above the market? If so, we are excited to have bumped onto you.

Learn how we are redefining the meaning of work, and be a part of the team raved by Clients, Job-seekers and Employees.

• Jobseeker Video Testimonials

• Employee Glassdoor Reviews

If you are a Application Security Engineer looking for excitement, challenge and stability in your work, then you would be glad to come across this page.

We are an IT Solutions Integrator/Consulting Firm helping our clients hire the right professional for an exciting long-term project. Here are a few details.

Check if you are up for maximizing your earning/growth potential, leveraging our Disruptive Talent Solution.

Role:Application Security Engineer

Experience:5-8Years Location:Hyderabad | Bengaluru | Pune | Chennai

Work Mode:Hybrid

Type:Contract to Hire Notice Period: 0-30 days

Requirements

Role Summary

We are looking for an Application Security Engineer to support Static and Dynamic Application Security Testing (SAST/DAST) scan and triage activities, while also providing hands-on outage support for the security tooling ecosystem — including AppScan, Checkmarx, Cycode, and GCP Model Armor. This role combines day-to-day vulnerability triage and remediation guidance with structured, SOP-driven incident response when scanning tools are degraded or unavailable, including support during scheduled patching windows and off-business-hours coverage.

Key Responsibilities

SAST & DAST Testing and Triage

• Perform and support

Static (SAST) and Dynamic (DAST) application security testing across in-scope applications.

• Triage scan findings

across SAST, DAST, SaaS, Secrets, and API security scan results, distinguishing false positives from confirmed vulnerabilities.

• Provide developers with

clear, actionable remediation guidance for validated vulnerabilities.

• Support application

onboarding into scan tooling and manage Penalty-Box exception handling and unblock decisions.

• Provide security support

during production release ACAB reviews and Breakglass approvals.

• Create, validate, and

drive Vulnerability Information Tracker (VIT) and defect records through to closure.

AppScan & Checkmarx Windows Server Patching Outage Support

• Provide support during

scheduled monthly Windows Server patching windows to ensure AppScan and Checkmarx remain available and operational after server restarts.

• Validate application

access for AppScan and Checkmarx following patching.

• Use RDP to connect to

in-scope management servers for troubleshooting.

• Check IIS Manager to

confirm required application pools are in Started status; verify all required HCL AppScan and Cx services are in Running status.

• Start any stopped

services or application pools; reboot the AppScan management server when required for database-related errors.

• Revalidate application

login pages after restart and escalate unresolved issues via email or Microsoft Teams.

Cycode Tool Outage Support

• Support Cycode-related

issues, primarily stuck or delayed pull requests during the secret-scanning process.

• Review incident details

and validate pull request scan history in Cycode; check for missing or delayed pull requests.

• Coordinate with the E3

team to verify Azure DevOps webhooks and recent ADO changes, and confirm branch policy settings.

• Validate whether an

actual secret is blocking the pull request and raise a vendor support ticket with Cycode when required.

• Coordinate unresolved

issues with the appropriate internal teams and Cycode Support until resolution.

GCP Model Armor Support

• Provide

off-business-hours support for managing Google Cloud Model Armor configurations.

• Enable or disable Model

Armor for required projects and switch configurations between Inspect Only mode and Inspect and Block mode.

• Update the necessary

Terraform configuration, create pull requests, coordinate approvals, and trigger pipeline deployments.

• Approve Terraform runs

in accordance with the SOP, coordinating with reviewers and approvers as needed.

Required Skills & Experience

• Hands-on experience with

SAST and DAST tools and processes (e.g., Checkmarx, HCL AppScan, or equivalent), including scan triage and false-positive analysis.

• Basic Windows Server

support knowledge, with experience using RDP for remote troubleshooting.

• Working knowledge of IIS

Manager and Windows Services, including starting/stopping services and application pools.

• Basic knowledge of

Cycode or similar secret-scanning tools, Azure DevOps, pull request workflows, webhooks/service hooks, and branch policies.

• Basic knowledge of

Google Cloud Platform (GCP), Terraform, Git repositories, pull request processes, pipeline deployments, and HCP Terraform workspace approvals.

• Experience with incident

handling, vendor coordination, and SOP-based outage support procedures.

• Strong written and

verbal communication skills, including the ability to escalate and coordinate via email and Microsoft Teams.

• Willingness to support

scheduled patching windows and off-business-hours / on-call activities as needed.

Preferred Qualifications

• Prior experience in an

Application Security Testing (AST), DevSecOps, or security operations support role.

• Familiarity with

vulnerability management workflows (VIT/defect lifecycle: creation, validation, closure).

• Exposure to CI/CD

pipelines and infrastructure-as-code approval workflows.

• Relevant certifications

(e.g., Security+, GCP Associate/Professional, or vendor-specific tool certifications) are a plus.

Soft Skills

• Strong attention to

detail when following SOP-based procedures under time pressure.

• Clear, calm

communication during live outage or incident scenarios.

• Ability to work

independently during off-hours support windows while knowing when to escalate.

Collaborative mindset for coordinating across internal teams (E3, DevOps, application teams) and external

Benefits

Visit us at http://alignity.io/careers. Alignity Solutions is an Equal Opportunity Employer, M/F/V/D.

CEO Message: Click Here

Clients Testimonial: Click Here