Skip to content

Open nowPosted 346 days ago

Application Security Engineer

DigiCert49 open roles

Where
Bangalore
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowApplication Security EngineerDigiCert · Bangalore
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on DigiCert's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market. DigiCert postings stay open a median of 45 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: posted 346 days ago

DigiCert median: 45 days open

The posting

Who we are

DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at www.digicert.com

Job summary

As an Application Security Engineer within our cybersecurity team, you will help safeguard the company’s web applications and services by supporting the integration of security practices into the Software Development Life Cycle (SDLC). You will collaborate with development, DevOps, and security teams to identify, assess, and remediate vulnerabilities, contribute to secure coding practices, and assist in implementing DevSecOps tooling and processes. This role is ideal for someone with a strong technical foundation who is eager to grow within the product/application security space.

What you will do

  • Support the integration of security controls and best practices across various phases of the SDLC.
  • Assist in security assessments, including static and dynamic code analysis, open-source dependency analysis, and limited penetration testing.
  • Participate in manual and automated code reviews to identify potential vulnerabilities and coding flaws.
  • Collaborate with software engineers to promote secure development practices, including the use of security testing tools in CI/CD pipelines.
  • Contribute to the evaluation, deployment, and tuning of DevSecOps tools such as SAST, DAST, and SCA platforms.
  • Help maintain secure deployment workflows and support security automation efforts.
  • Participate in cross-functional security reviews of new features and systems with guidance from senior engineers.
  • Stay up to date on current security threats, vulnerabilities, and best practices in application security.
  • Assist with triaging vulnerabilities from internal scans, bug bounty submissions, or external assessments.
  • Document processes and playbooks to support consistent and scalable security practices.
  • Provide input to the development of internal security standards and reference architectures.
  • Support remediation efforts in collaboration with engineering teams.
  • Participate in promoting a security-first culture across the organization.
  • Other duties and responsibilities as assigned.

What you will have

  • Bachelor’s degree in computer science, cybersecurity, or a related technical field.
  • 2+ years of experience in cybersecurity, software engineering, or DevOps, with at least 1+ years focused on application or product security
  • Solid understanding of common web application vulnerabilities (e.g., OWASP Top 10, CWE) and remediation strategies.
  • Familiarity with DevSecOps tools (SAST, DAST, SCA) and secure SDLC methodologies. - nice to have if they have a solid understanding of common web application vulnerabilities (e.g., OWASP Top 10, CWE).
  • Ability to analyze code and spot security issues with guidance.
  • Strong communication and collaboration skills.
  • Strong attention to detail and willingness to learn new technologies.

Nice to have

  • Hands-on experience with CI/CD pipelines (e.g., GitHub Actions, GitLab CI, Jenkins).
  • Experience with programming/scripting languages such as Python, JavaScript, or Java.
  • Familiarity with security standards and frameworks such as NIST, OWASP SAMM, ISO 27001, or PCI DSS.
  • Experience working in a regulated environment (e.g., financial services, healthcare, or government).
  • Professional certifications such as Security+, CEH, eJPT, or equivalent (OSCP or similar preferred but not required).
  • Exposure to cloud platforms such as AWS, Azure, or GCP.
  • Experience contributing to or managing a bug bounty triage process.

Benefits

  • Generous time off policies
  • Top shelf benefits
  • Education, wellness and lifestyle support

To protect candidate information and maintain a secure hiring process, all applications must be submitted through our careers portal. Resumes or CVs sent directly via email will not be reviewed or considered.

#LI-SD1

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against DigiCert's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on DigiCert's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    DigiCert's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.