CodeVyasa - Application Security Engineer

Role Overview:

We are looking for an experienced Application Security Engineer with a Full Stack development background to strengthen the security posture of our applications and cloud infrastructure. The ideal candidate should have hands-on experience in Application Security, Secure SDLC, Vulnerability Assessment & Penetration Testing (VAPT), secure code reviews, and cloud security. A strong understanding of modern Full Stack technologies is essential to identify and mitigate security risks throughout the software development lifecycle.

About Us:

CodeVyasa is a mid-sized product engineering company that works with top-tier product and solutions organizations such as McKinsey, Walmart, Razorpay, Swiggy, and others. We are a team of 550 engineers, driving innovation across Product & Data Engineering, focusing on Agentic AI, RPA, Full Stack, and GenAI-based solutions.

Mandatory Skills:

• 48 years of experience in Application Security with a strong Full Stack development background.
• Strong expertise in Application Security and Secure Software Development Lifecycle (Secure SDLC).
• Hands-on experience with Cybersecurity, Vulnerability Assessment & Penetration Testing (VAPT), and Secure Source Code Reviews.
• Strong understanding of Data Privacy regulations, including DPDP and GDPR compliance.
• Experience implementing Cloud Security best practices on AWS and/or Azure.
• Strong knowledge of Database Security, Data Protection, and Data Governance principles.
• Good understanding of Full Stack technologies including Flutter, React.js, Node.js, Laravel, MySQL, and PostgreSQL.
• Experience managing and securing cloud infrastructure.
• Knowledge of security architecture, threat modeling, and secure application design.
• Ability to perform vendor technical assessments and understand basic solution architecture.

Preferred Qualifications:

• Exposure to MERN and LAMP technology stacks.
• Experience with AWS Lightsail.
• Knowledge of DevSecOps practices and security automation tools.
• Familiarity with security standards such as OWASP Top 10, CWE, and SANS.
• Relevant security certifications such as CEH, Security , CSSLP, AWS Security Specialty, or equivalent are an advantage.
• Experience working with enterprise security and compliance frameworks.

Key Responsibilities:

• Integrate security best practices throughout the Secure SDLC.
• Conduct application security assessments, VAPT, and secure source code reviews.
• Identify, analyze, and remediate application and infrastructure vulnerabilities.
• Implement and monitor cloud security controls across AWS and Azure environments.
• Ensure compliance with DPDP, GDPR, and other applicable data privacy regulations.
• Review database security configurations and enforce data governance standards.
• Collaborate with development teams to build secure Full Stack applications.
• Perform vendor technical reviews and provide security recommendations during solution design.
• Work closely with engineering and infrastructure teams to implement security controls and improve overall application resilience.

Why Join Us?:

• Work on innovative, high-impact projects with leading global clients.
• Exposure to large-scale Cybersecurity, Cloud, AI, and Product Engineering initiatives.
• Continuous learning and upskilling opportunities through internal and external programs.
• Supportive and collaborative work culture with flexible policies.
• Competitive salary and comprehensive benefits package.
• Free healthcare coverage for employees and dependents.