Application Security Engineer

Tetra Pak - Pune, IN

- Senior

Pune, IN

Paper Manufacturing

About the position

As an Application Security Engineer, you will be a senior member in the global Information Security team, and your main work will be to improve security posture of the entire inhouse-developed software portfolio across Tetra Pak. You will do so by supporting various software development teams in a global capacity, to ensure that Tetra Pak applications are safe and secure. Here, you have the freedom to use your expertise to improve something vital to all of our lives - food. With structured career development, a role with us can take your career to the next level.

Responsibilities

• Establish processes and guidelines for Secure Software Development Lifecycle together with AppSec Lead and Security Architects.
• Be a Subject Matter Expert and body of knowledge in Application Security within the software development area.
• Coach and support a broad network of Security Champions, and work together with relevant stakeholders to establish Secure Software Development Lifecycle mindset and ways of working in their respective teams.
• Support development teams in DevSecOps practices.
• Provide support in Threat Modeling activities.
• Ensure that the Application Security capabilities including training and tooling are relevant and up-to-date.
• Drive the success and increasing maturity of Tetra Pak's Application Security Program.

Requirements

• Bachelor's degree within IT, or a minimum of 7 years work experience in software development, with at least 3 years in utilizing or championing Secure Software Development methodology.
• Extensive knowledge and strong working experience in OWASP Top 10 and Application Security in general.
• Experience with DevSecOps and exposure to commonly used CI/CD platforms.
• Experience in Threat Modelling & Risk Assessment.
• Familiarity with SAST, SCA, and DAST tools.
• Exposure to one or few commonly used programming languages/platforms (e.g., .NET, C#, Java, JavaScript/TypeScript).
• Knowledge of Cloud & modern tech-stack security (PaaS, Containerization & orchestration, microservices, etc.).
• Experience in Vulnerability management.
• Knowledge of Azure, Windows, and Linux security practices.
• Familiarity with hacking tools and offensive security techniques.

Benefits

• A variety of exciting challenges with ample opportunities for development and training in a truly global landscape.
• A culture that pioneers a spirit of innovation where our industry experts drive visible results.
• An equal opportunity employment experience that values diversity and inclusion.
• Market competitive compensation and benefits with flexible working arrangements.