Lead application security by shifting left: perform threat modeling and secure design reviews, deploy SAST/DAST/SCA/secrets scanning, integrate security into CI/CD, run code reviews, track remediation SLAs, maintain asset inventory, lead Security Champions, train developers, and evaluate security tools and automation.
Responsibilities
- Shift left” security efforts to build security into the software development lifecycle:
- Conduct secure design reviews and threat modeling to identify and prioritize risks, attack surfaces, and vulnerabilities
- Deploy and operationalize static (SAST), dynamic (DAST), dependency (SCA) and secrets scanning
- Work with Platform DevOps team to build and maintain security automation tools to seamlessly embed inline security checks into CI/CD pipelines
- Partner with Platform DevOps to help design secure-by-default architectures and workflows
- Assist with application security code reviews of source code changes and advise developers on remediating vulnerabilities following secure coding practices
- Establish and track SLA governance to ensure security findings are identified, prioritized, and remediated.
- Maintain application asset inventory.
- Lead the Security Champions Program to build security-minded culture amongst developers and IT Operations teams.
- Act as a trusted advisor and partner for development and cross-functional project teams, providing actionable guidance to address security.
- Help with training on secure coding practices, empowering teams to proactively prevent vulnerabilities.
- Evaluate and implement security tools and automation solutions to enhance the security posture of applications and streamline security processes.
PROFILE
- Bachelor's degree in Computer Science, Information Security, or related professional experience.
- Have 3+ years of hands-on experience in application security, including securing cloud-based and containerized environments.
- Experience performing secure code reviews and interpreting SAST/SCA/DAST results.
- Strong experience with modern development workflows, including CI/CD pipelines, using Azure Pipelines and GitHub Actions.
- Working knowledge of the OWASP Top 10 for web applications and APIs and how to apply the standard to minimize security risk.
- In-depth understanding of vulnerabilities and secure coding practices.
- Hands-on experience with security tools like Snyk, Veracode, Burpsuite or similar.
- Familiarity with cloud platforms (AWS, Azure) and containerization (Docker, Kubernetes).
- Proficiency in programming languages like Python, Java, or C# is preferred.
- Have empathy, collaboration skills, and a learning mindset to work cross-functionally with engineers of all levels to build security into the product life cycle.
- Possess broad security knowledge to connect the dots across domains and identify holistic ways to lower the overall threat surface.
- Have the ability to distill complex security concepts into clear actions and drive consensus with minimum supervision.
- Demonstrated success in partnering with developers to integrate security.
Photon Chennai, Tamil Nadu, IND Office
DLF IT Park 1/124 Mount Poonamallee Road Sivaji Gardens Manapakkam , Chennai, India, 600089
Similar Jobs
Enterprise Web • Mobile • Professional Services • Software
Build and improve production LLM agents and AI features through evaluation, experimentation, observability, prompting, context engineering, tool use, and workflow design. Develop backend services, APIs, data models, and feedback pipelines that make agent behavior reliable and measurable. Investigate performance issues, run staged rollouts and production replays, define quality standards, and partner with Product, Data Science, and Sales to deliver business outcomes with appropriate privacy, security, and human-oversight safeguards.
Top Skills:
Agentic WorkflowsAPIsBackend ServicesBraintrustClaude CodeCursorData ModelsDatadog Llm ObservabilityEvaluation HarnessesGithub CopilotLangchainLanggraphLangsmithLlm-As-JudgeLlm-Based SystemsMcp
Enterprise Web • Mobile • Professional Services • Software
Own the AI product roadmap from discovery through launch and iteration. Define model evaluation standards, failure modes, rollback plans, and agent-autonomy boundaries. Prototype and ship production AI features, influence architecture, and apply prompting and context design. Collaborate with Design, Research, Engineering, Sales, Marketing, and Customer Success while tracking quality, latency, cost, adoption, and growth metrics.
Top Skills:
AIBraintrustClaudeCodexCursorLangsmithLlmsOpenclaw
Enterprise Web • Mobile • Professional Services • Software
Build and own full-stack product features from ambiguous problems through deployment. Partner with Product and Design, make UX decisions, integrate LLM and agent capabilities into trustworthy product experiences, talk with users, instrument releases, and iterate based on usage. The role requires strong product judgment, user empathy, independent execution, and comfort using AI coding tools while collaborating with AI engineers on model behavior.
Top Skills:
Claude CodeCursorGithub CopilotLlm AgentsLlm ApisPrompting
What you need to know about the Chennai Tech Scene
To locals, it's no secret that South India is leading the charge in big data infrastructure. While the environmental impact of data centers has long been a concern, emerging hubs like Chennai are favored by companies seeking ready access to renewable energy resources, which provide more sustainable and cost-effective solutions. As a result, Chennai, along with neighboring Bengaluru and Hyderabad, is poised for significant growth, with a projected 65 percent increase in data center capacity over the next decade.
