Application Security Engineer – SAST/DAST & Security Tooling Outage Support

Do you love a career where you Experience, Grow & Contribute at the same time, while earning at least 10% above the market? If so, we are excited to have bumped onto you. Learn how we are redefining the meaning of work, and be a part of the team raved by Clients, Job-seekers and Employees. Jobseeker Video Testimonials Employee Glassdoor Reviews If you are a Application Security Engineer looking for excitement, challenge and stability in your work, then you would be glad to come across this page.

We are an IT Solutions Integrator/Consulting Firm helping our clients hire the right professional for an exciting long-term project. Here are a few details. Check if you are up for maximizing your earning/growth potential, leveraging our Disruptive Talent Solution. Role:Application Security Engineer Experience:5-8Years Location:Hyderabad | Bengaluru | Pune | Chennai Work Mode:Hybrid Type:Contract to Hire Notice Period: 0-30 days Requirements Role Summary We are looking for an Application Security Engineer to support Static and Dynamic Application Security Testing (SAST/DAST) scan and triage activities, while also providing hands-on outage support for the security tooling ecosystem — including App.

Scan, Checkmarx, Cycode, and GCP Model Armor. This role combines day-to-day vulnerability triage and remediation guidance with structured, SOP-driven incident response when scanning tools are degraded or unavailable, including support during scheduled patching windows and off-business-hours coverage.

Key Responsibilities

SAST & DAST Testing and Triage

• Perform and support Static (SAST) and Dynamic (DAST) application security testing across in-scope applications.
• Triage scan findings across SAST, DAST, SaaS, Secrets, and API security scan results, distinguishing false positives from confirmed vulnerabilities.
• Provide developers with clear, actionable remediation guidance for validated vulnerabilities.
• Support application onboarding into scan tooling and manage Penalty-Box exception handling and unblock decisions.
• Provide security support during production release ACAB reviews and Breakglass approvals.
• Create, validate, and drive Vulnerability Information Tracker (VIT) and defect records through to closure. App. Scan & Checkmarx Windows Server Patching Outage Support
• Provide support during scheduled monthly Windows Server patching windows to ensure App. Scan and Checkmarx remain available and operational after server restarts.
• Validate application access for App. Scan and Checkmarx following patching.
• Use RDP to connect to in-scope management servers for troubleshooting.
• Check IIS Manager to confirm required application pools are in Started status; verify all required HCL App. Scan and Cx services are in Running status.
• Start any stopped services or application pools; reboot the App. Scan management server when required for database-related errors.
• Revalidate application login pages after restart and escalate unresolved issues via email or Microsoft Teams. Cycode Tool Outage Support
• Support Cycode-related issues, primarily stuck or delayed pull requests during the secret-scanning process.
• Review incident details and validate pull request scan history in Cycode; check for missing or delayed pull requests.
• Coordinate with the E3 team to verify Azure DevOps webhooks and recent ADO changes, and confirm branch policy settings.
• Validate whether an actual secret is blocking the pull request and raise a vendor support ticket with Cycode when required.
• Coordinate unresolved issues with the appropriate internal teams and Cycode Support until resolution. GCP Model Armor Support
• Provide off-business-hours support for managing Google Cloud Model Armor configurations.
• Enable or disable Model Armor for required projects and switch configurations between Inspect Only mode and Inspect and Block mode.
• Update the necessary Terraform configuration, create pull requests, coordinate approvals, and trigger pipeline deployments.
• Approve Terraform runs in accordance with the SOP, coordinating with reviewers and approvers as needed.

Required Skills

& Experience

• Hands-on experience with SAST and DAST tools and processes (e.g., Checkmarx, HCL App. Scan, or equivalent), including scan triage and false-positive analysis.
• Basic Windows Server support knowledge, with experience using RDP for remote troubleshooting.
• Working knowledge of IIS Manager and Windows Services, including starting/stopping services and application pools.
• Basic knowledge of Cycode or similar secret-scanning tools, Azure DevOps, pull request workflows, webhooks/service hooks, and branch policies.
• Basic knowledge of Google Cloud Platform (GCP), Terraform, Git repositories, pull request processes, pipeline deployments, and HCP Terraform workspace approvals.
• Experience with incident handling, vendor coordination, and SOP-based outage support procedures.
• Strong written and verbal communication skills, including the ability to escalate and coordinate via email and Microsoft Teams.
• Willingness to support scheduled patching windows and off-business-hours / on-call activities as needed.

Preferred Qualifications

• Prior experience in an Application Security Testing (AST), Dev. Sec. Ops, or security operations support role.
• Familiarity with vulnerability management workflows (VIT/defect lifecycle: creation, validation, closure).
• Exposure to CI/CD pipelines and infrastructure-as-code approval workflows.
• Relevant certifications (e.g., Security+, GCP Associate/Professional, or vendor-specific tool certifications) are a plus. Soft Skills
• Strong attention to detail when following SOP-based procedures under time pressure.
• Clear, calm communication during live outage or incident scenarios.
• Ability to work independently during off-hours support windows while knowing when to escalate. Collaborative mindset for coordinating across internal teams (E3, DevOps, application teams) and external Benefits Visit us at http://alignity.io/careers. Alignity Solutions is an Equal Opportunity Employer, M/F/V/D. CEO Message: Click Here Clients Testimonial: Click Here