Albireo Recruiters
Confidential · Technology

Application Security Analyst

  • Bengaluru · Office
  • 5–10 yrs
  • CTC Not disclosed
  • Full-time
  • Notice ≤ 90 days
  • Posted today
Apply Apply Save

By applying you agree that Albireo Recruiters shares your profile with this client for this role and keeps it for its recruiting. Privacy policy.

Work as an Application Security Analyst on core and digital banking platforms. You will embed security by design into banking applications, review APIs, authentication flows and certificates, and help close penetration test findings. Based in Bengaluru, Pune, Mumbai, Chennai or Noida, working from the office.

The role

The role is for an Application Security Analyst who will work hands on across the analysis, design and implementation of application security for core banking and digital banking platforms. You will help make sure that banking applications are built, configured and deployed with security by design, meeting regulatory, compliance and enterprise standards.

Your day will involve reviewing application security mechanisms, including external APIs, internal interfaces, token and certificate based authentication, secrets management, SSO, OAuth2 and OpenID Connect. You will review encryption at rest and in motion, key management and database security. You will work with engineering teams, enterprise security groups and technology partners to translate requirements into technical solutions. You will also review VAPT frameworks and policies, and analyse VAPT observations and suggest remediation.

We are looking for 5 to 10 years of experience in application security. You should have a strong grasp of OWASP Top 10, API Security Top 10 and CWE/SANS, and secure coding for Java, Spring, REST APIs and microservices. You should know JavaEE architecture, cryptography, TLS, digital certificates and HSM/KMS. Hands on use of SAST, DAST and SCA tools such as Fortify and SonarQube is needed, along with AWS or Azure security controls, IAM, VPC and OAuth2 based authentication. Experience with Apache Kafka, container security, IAST, zero-trust principles, CI/CD secure deployment, core or digital banking domain experience, a bachelor's degree in IT, computer science, cybersecurity or a related field, and CEH or Security+ certification will be an advantage.

The role is full time and based in the office in Bengaluru, Pune, Mumbai, Chennai or Noida. Notice period of up to 90 days is accepted.

To apply, sign in on hyperwrk.com and apply in one step. A recruiter at Albireo reads every application.

Must have

  • Strong knowledge of common application security vulnerabilities (OWASP Top 10, CWE/SANS, API Security Top 10)
  • Expertise in JavaEE architecture; secure coding practices for Java, Spring, REST APIs, microservices
  • Hands-on experience with SAST, DAST, SCA, IAST, container scanning tools (e.g., Fortify, SonarQube)
  • knowledge of cryptography principles, digital certificates, TLS, HSM/KMS
  • AWS/Azure security controls, IAM, VPC architecture, zero-trust principles
  • token & certificate-based authentication, secrets management, SSO, OAuth2, OpenID Connect

Nice to have

  • modern technologies like Apache Kafka, Container orchestration and microservices architecture
  • Certifications preferred: CEH, Security+, or equivalents
  • Experience of working in Core Banking & Digital Banking environments will be preferred

What happens after you apply

The recruiter working this role reads your application. If it fits, they call you before anything is shared with the company. You see every stage in your account, in plain words.