Deltacubes - Application Security Engineer

Key Responsibilities

• Design and implement application security controls across the software development lifecycle.
• Conduct security reviews and promote secure coding and secure design principles.
• Identify and remediate application vulnerabilities based on OWASP Top 10 and industry security standards.
• Integrate application security tools such as Snyk, Checkmarx, Fortify, and SonarQube into development workflows.
• Implement and manage Identity and Access Management (IAM) solutions.
• Work with OAuth 2.0 and OpenID Connect for authentication and authorization.
• Implement encryption and security controls for applications and data.
• Collaborate with network and infrastructure teams on firewalls, HTTPS, TLS, and network security.
• Secure applications and workloads across AWS, Azure, or GCP environments.
• Integrate security checks into CI/CD and DevSecOps pipelines.
• Support container security initiatives involving Docker and Kubernetes.
• Identify security risks, conduct root-cause analysis, and recommend remediation strategies.
• Work with development, DevOps, infrastructure, and business stakeholders to strengthen the organization's security posture.
• Contribute to Zero Trust and modern application security initiatives.
  
  

• Application Security, Secure Coding & Secure Design, OWASP Top 10
• IAM (4+ years), Cloud Platforms (3+ years)
• OAuth 2.0, OpenID Connect, Encryption Techniques
• Snyk / Checkmarx / Fortify / SonarQube
• DevSecOps & CI/CD Security, Network Security, HTTPS / TLS
• AWS / Azure / GCP Security
  
  

• Container Security (Docker, Kubernetes), Zero Trust Architecture, Modern Security Frameworks
• Security certifications such as CISSP, CEH, or CSSLP
  
  

• Strong hands-on experience in application and cloud security.
• Proven experience implementing IAM and authentication solutions.
• Strong understanding of security vulnerabilities and remediation techniques.
• Excellent analytical and problem-solving skills.
• Strong communication and stakeholder-management capabilities.
• Ability to collaborate effectively with engineering, DevOps, cloud, and security teams