Application Security Engineer
Experience: 0-2 years in Security Operations/ Application Security Engineer
Job Location: Chennai
Key Responsibilities:
- Conduct risk assessments and Identify, document, and prioritise technical risks across the environment, translating complex vulnerabilities into actionable business risks.
- Perform threat modelling for applications, services, and infrastructure to identify attack vectors and security gaps and Lead threat modelling sessions with engineering teams for new features using frameworks like STRIDE.
- Manage the end-to-end lifecycle of vulnerabilities found in our software and infrastructure.
- Implement and tune SAST (Static), DAST (Dynamic), and IAST (Interactive) tools to ensure high-quality security signals without slowing down development.
- Perform manual code reviews for critical business logic that automated tools might miss.
- Monitor, triage, and investigate security alerts generated from intrusion detection scripts, SIEMs, and other detection mechanisms. Develop custom scripts (Python, Bash, etc.) to automate repetitive alert handling and incident response workflows.
- Analyze suspicious activity, validate incidents, and support incident response and post-incident reviews
- Collaborate with development teams to remediate findings and embed security into CI/CD pipelines ensuring code is scanned and verified before deployment.
- Document findings, response actions, and security recommendations clearly and effectively
Required Skills: - Strong understanding of network protocols, Linux internals, and the MITRE ATT&CK framework.
- Solid understanding of threat modeling methodologies (e.g., STRIDE, attack trees) and Hands-on experience with SAST, DAST, and IAST tools.
- Hands-on experience with AppSec tooling (e.g., Snyk, Veracode, Checkmarx, Burp Suite, Zap, or Contrast Security).
- Proficiency in at least one major language for building security tools and automation.
- Familiarity with AWS, Azure, or GCP security services and Infrastructure as Code, along with experience in log analysis, alert tuning, false-positive reduction, and responding to intrusion detection or custom security alerts, is an added advantage.
Note :
• Only the shortlisted candidates will receive the interview call letter.
• Kindly refrain from taking up multiple interviews with Zoho simultaneously. Please be noted that we will not be able to proceed further if you’re found to be a part of various processes simultaneously. We might also withdraw the offer if required.
How to Apply for Zoho Off Campus Drive 2026
Ready to secure your future at Zoho? Follow these steps:
- Review full eligibility on the official job page.
- Prepare your resume highlighting relevant projects and skills.
- Submit your application before the deadline (only shortlisted candidates get interview calls).
Note: Avoid multiple Zoho interviews simultaneously, as it may disqualify you.
Boost Your Application with CareerToolkit Tools
Maximize your chances of getting shortlisted! Use these free tools to perfect your profile:
- Build a professional resume with our Resume Builder.
- Check ATS compatibility using ATS Score Checker.
- Practice with Interview Preparation resources.
- Generate a winning cover letter via Cover Letter Generator.
- Estimate your salary with Salary Estimator.
- Plan your career using Career Path Planner.
- Get personalized Certification Suggestions.
- Get expert feedback from Resume Reviewer.
Don’t miss this golden opportunity for Zoho freshers hiring 2026! Apply today and kickstart your cybersecurity career.
🔒 Disclaimer
The information in this post is intended for educational and promotional purposes only. The company is an equal opportunity employer and does not discriminate based on race, religion, gender, nationality, or disability. Always verify job details with the official website for the latest updates. This blog is not affiliated with or officially endorsed by the company.
© 2025 IT Referral Jobs. All rights reserved.
Good for job seekers.