~5mo ago

Application Security Engineer (Code & Refactoring Specialist)

India·Hyderabadmid

EngineeringSecurity Engineer

6 views0 saves0 applied

Quick Summary

Overview

Application Security Engineer (Code & Refactoring Specialist) Location : Hyderabad (Hybrid- 3 days Office) Experience: 5+ Years Certifications Required: : CSSLP, CEH, OSWE, or equivalent. Shift Timing: 9:30 am -6:30 pm IST

Key Responsibilities

• Conduct static and dynamic code reviews (C/C++, .NET, Java, Python) for CRA/SOC2/ISO compliance gaps. • Run and tune SAST/SCA/Secrets/IaC scanners to identify vulnerabilities with low false positives.

Technical Tools

cppjavapythonsnykcode-reviewsecurity-best-practices

Application Security Engineer (Code & Refactoring Specialist)

Location : Hyderabad (Hybrid- 3 days Office)

Experience: 5+ Years

Certifications Required: : CSSLP, CEH, OSWE, or equivalent.

Shift Timing: 9:30 am -6:30 pm IST

About Us

At Codvo, we are committed to building scalable, future-ready data platforms that power business impact. We believe in a culture of innovation, collaboration, and growth, where engineers can experiment, learn, and thrive. Join us to be part of a team that solves complex data challenges with creativity and cutting-edge technology.

Overview

We are hiring an Application Security Engineer to work hands-on with client and internal development teams to review, refactor, and remediate code for CRA compliance. You will operate at the intersection of security engineering and software development, embedding secure practices into millions of lines of legacy and new code for industrial clients.

Key Responsibilities

• Conduct static and dynamic code reviews (C/C++, .NET, Java, Python) for CRA/SOC2/ISO compliance gaps.

• Run and tune SAST/SCA/Secrets/IaC scanners to identify vulnerabilities with low false positives.

• Build secure code remediation patterns (crypto, auth, logging, PII handling).

• Collaborate with client developers to merge secure fixes quickly and efficiently.

• Work with the CRA Practice Lead to maintain compliance-aligned secure coding playbooks.

• Support generation of compliance evidence (audit-ready artifacts).

Required Skills & Qualifications

• 5–8 years in Application Security + Software Development.

• Strong coding experience in C/C++/.NET/Java/Python.

• Hands-on with tools like SonarQube, Semgrep, Snyk, Checkov, Trivy, GitHub Advanced Security.

• Knowledge of secure coding standards (OWASP, MISRA, CERT).