Application Security Engineer - Tata Consultancy Services (TCS)

Key Responsibilities

• Design and implement security controls throughout the software development lifecycle, ensuring secure coding standards are followed.
• Conduct static and dynamic application security testing (SAST/DAST) on codebases and web applications, identify vulnerabilities, and drive remediation.
• Collaborate with development, DevOps, and cloud teams to embed security into CI/CD pipelines and cloud environments (AWS).
• Perform threat modeling, security architecture reviews, and provide guidance on OWASP Top 10 mitigations.
• Develop security automation scripts and integrate security tools to improve detection and response efficiency.

Requirements

• 3+ years of hands‑on experience in application security, including SAST, DAST, and manual code review.
• Strong knowledge of OWASP Top 10, secure coding practices, and common vulnerability remediation techniques.
• Proficiency with security tooling (e.g., SonarQube, Checkmarx, Burp Suite) and automation in CI/CD pipelines (Jenkins, GitLab CI, Azure DevOps).
• Experience securing applications deployed on cloud platforms, preferably AWS, and familiarity with cloud security best practices.
• Solid understanding of programming languages such as Java, Python, or JavaScript and ability to write security‑focused scripts.