Application And Web Security Specialist Jobs

APPLICATION AND WEB SECURITY SPECIALIST THE OPPORTUNITY The Application and Web Security Specialist will serve as a security consultant to Web and Application Developers. You will work with developers on identifying security risks within their applications and validating remediation. This role offers the opportunity to build solid relationships throughout the enterprise, with developers and vendors, while learning about the various technologies employed within our organization. There are other opportunities to serve included with this role that relate to other Security disciplines such as Threat Security, Vulnerability Management, and Event Correlation. THE TEAM The Information Security Team is responsible for the confidentiality of customer and employee information, ensuring the data stored and shared maintains integrity, all while making sure that all of this does not impact the availability of the entire Dillard’s enterprise. This team is expected to be high-performing. To meet this expectation, the team members are communicative and collaborative, always sharing knowledge and research. Members of this team should be able to understand what is expected of them and adjust on the fly, as priorities may change depending on the company's needs. If you are someone who sets a standard of excellence for yourself and you enjoy working alongside others who set the same standard and who genuinely want each of their peers to succeed, you may be the perfect addition to this team. WHAT YOU WILL DO Inspect and assess current solutions for Web and Application Security risks Architect and implement security controls within the Software Development Lifecycle (SDLC) Hold recurring cadences with development and security leadership to discuss findings and future paths for the company regarding application security posture Participate in vulnerability verification and assist development teams in remediation based on reports from scanners, along with manual application sec

About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in. Available Locations - Bengaluru, India About the Role As our Global Physical Security Specialist and leader, reporting to our Sr. Director of Physical Security you will take ownership of our physical security technologies across our office and data center footprint and review and document intelligence supporting the physical security mission. We are looking for someone with law enforcement or former military experience who is excited about so

About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in. Available Location - Canada; Remote Job Title - Senior Security Compliance Specialist The Team Security Compliance is a critical business function at Cloudflare. Compliance certifications allow our customers to be confident in the security and privacy of our products, while also providing frameworks for well-tuned information security management systems and programs. These standards provide clarity to Cloudflare’s teams on how to incorporate secur

We are a Leading Delhi Based Consultant, currently we are hiring for our client for Noida Location. Designation: Software Developer - React, PHP Desired Experience: 3 - 6 Years Qualification: UG: B.C.A. in Computer Applications (General), B.Tech / B.E. in Computer Science and Engineering (CSE) PG: M.Tech in Computers, MCA in Any Specialization. Job Location: Noida Sec - 61 (WFH/Work from Home Available) Total Employees: 80+ Members Working Days: Monday to Friday Key Responsibilities Develop and maintain web applications using React.js and PHP. Build reusable and responsive UI components. Design and develop RESTful APIs and backend services. Integrate front-end applications with backend APIs. Optimize application performance, scalability, and security. Troubleshoot, debug, and resolve application issues. Collaborate with designers, project managers, and other developers. Write clean, maintainable, and well-documented code. Participate in code reviews and follow development best practices. Manage database design, development, and optimization. Required Skills Frontend Strong experience with React.js. Proficiency in JavaScript (ES6+), HTML5, CSS3. Experience with Redux, Context API, or other state management libraries. Knowledge of responsive web design principles. Familiarity with Bootstrap, Material UI, or Tailwind CSS. Backend Strong experience with PHP. Experience with PHP frameworks especially CodeIgniter. Knowledge of REST API development and integration. Understanding of authentication and authorization mechanisms. Database Strong knowledge of MySQL/MariaDB. Experience in database design, optimization, and query performance tuning. Tools & Technologies Composer and NPM. Web servers such as Apache. Qualifications Bachelors degree in computer science, Information Technology, or related field. 3 - 6 years of experience in React.js and PHP development. Strong problem-solving and analytical skills. Good communication and teamwork abilities. Experience

About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products. We are technical in what we build but are operational in how we do our work, and are committed to supporting all products and research at OpenAI. Our Security team tenets include: prioritizing for impact, enabling researchers, preparing for future transformative technologies, and engaging a robust security culture. About the Role We’re seeking an exceptional Staff - Principal level offensive security domain expert to build agents that continuously identify and coordinate remediation of vulnerabilities across OpenAI’s infrastructure and applications. You will be the technical owner of this effort, combining deep offensive security judgment with agent engineering to build a production system that can operate safely and reliably at scale. As OpenAI increasingly uses automation throughout the company, we believe our security testing must become increasingly automated as well. Advances in model capabilities create an opportunity to test more of our attack surface than would be possible through human effort alone and a need to ensure that we remain ahead of those same capabilities as they become available to attackers. In this role, you’ll build a portfolio of specialized agents that develop a deep understanding of OpenAI’s infrastructure, applications, processes, and security boundaries. These agents will combine internal context with feedback from running systems to explore our cloud environments, Kubernetes clusters, web applications, endpoints, external attack surface, and other high-value targets. The goal is for agents to not only discover vulnerabilities, but also to validate exploitability, document impact, drive remediation, and verify fixes. Success will be measured through outcomes like vulnerabilities fixed, attack surface covered, and performance on evals

About Us: Paytm is India's leading mobile payments and financial services distribution company. Pioneer of the mobile QR payments revolution in India, Paytm builds technologies that help small businesses with payments and commerce. Paytm’s mission is to serve half a billion Indians and bring them to the mainstream economy with the help of technology. Job Summary: We are seeking a highly motivated and skilled Akamai CDN & WAF Engineer with 2-5 years of hands-on experience in configuring, deploying, and managing Akamai's Content Delivery Network (CDN) and Web Application Firewall (WAF) solutions. The ideal candidate will possess a strong understanding of web performance optimization, security best practices, and have a proven track record of implementing and troubleshooting Akamai services in a production environment. This role requires a proactive individual with excellent problem-solving skills and the ability to collaborate effectively with cross-functional teams. Responsibilities: Configuration and Deployment: Configure and deploy Akamai CDN services (e.g., Domain onboarding, delivery rules, caching policies, origin configurations) and WAF rulesets (e.g., security policies, custom rules, DOS and client reputation) based on application requirements and security guidelines. Production Support: Provide day-to-day operational support for Akamai CDN and WAF infrastructure, including monitoring performance, identifying and resolving issues, and implementing necessary changes. Performance Optimization: Analyze website performance metrics and implement Akamai CDN features and configurations to optimize website speed, reduce latency, and improve user experience. Security Implementation: Implement and manage Akamai WAF policies to protect web applications from various security threats, including OWASP Top 10 vulnerabilities, bot attacks, and DDoS attacks. Rule Management: Create, review, and maintain custom WAF rules and exceptions based on application-specific ne

Overview: The role is responsible for managing and supporting the operations of Global Network Engineering in a hybrid/cloud environment and provides senior-level expertise to the network engineering team. We're looking for an expert in on-premises networking, cloud infrastructure networking (Azure/AWS), and telecommunications (VOIP) in global environments, with knowledge and focus on zero-trust networking methodologies. This position requires off-hours on-call availability. This is a remote position with a 3 PM - 12 AM Shift. Candidates may need to visit the Mumbai office as and when needed in the general shift. What You'll Do: Manage physical network management and support covering Guidepoint offices, including, but not limited to, firewalls, routers, switches, etc. Responsible for managing the Enterprise WiFi Operations ZScaler Network management Monitor global traffic latency, issues, and application performance Update and design next-generation network models Network detection and response Intrusion detection and prevention technologies Azure Cloud Traffic integrating with On-prem traffic Azure Web Security CASB models and methodologies What You Have: 8+ years of experience with core networking in an enterprise environment, ideally global network design and security methodologies. 5+ years of working experience with advanced Azure cloud networking technologies. Must have substantial experience with managing WiFi Operations. CCNP Certified or equivalent experience 3+ years of hands-on experience, preferably with Sonic-wall/Netgear. Solid engineering knowledge of routing, switching (VLANs), Azure networking, firewalls, and traffic management. Update network security based on VNETs and Subnets, with traffic monitoring, etc. Knowledgeable in Azure Application Gateways, Front Door, and other security tools. Nice to have: Must know telecommunication technologies (VOIP, SIP Trunking, Microsoft Teams) Network security experience (vulnerability manage

InMobi Advertising is a global technology leader helping marketers win the moments that matter. Our advertising platform reaches over 2 billion people across 150+ countries and turns real-time context into business outcomes, delivering results grounded in privacy-first principles. Trusted by 30,000+ brands and leading publishers, InMobi is where intelligence, creativity, and accountability converge. By combining lock screens, apps, TVs, and the open web with AI and machine learning, we deliver receptive attention, precise personalization, and measurable impact. Through Glance AI, we are shaping AI Commerce, reimagining the future of e-commerce with inspiration-led discovery and shopping. Designed to seamlessly integrate into everyday consumer technology, Glance AI transforms every screen into a gateway for instant, personal, and joyful discovery. Spanning diverse categories such as fashion, beauty, travel, accessories, home décor, pets, and beyond, Glance AI delivers deeply personalized shopping experiences. With rich first-party data and unparalleled consumer access, it harnesses InMobi’s global scale, insights, and targeting capabilities to create high impact, performance driven shopping journeys for brands worldwide. Recognized as a Great Place to Work, and by MIT Technology Review, Fast Company’s Top 10 Innovators, and more, InMobi is a workplace where bold ideas create global impact. Backed by investors including SoftBank, Kleiner Perkins, and Sherpalo Ventures, InMobi has offices across San Mateo, New York, London, Singapore, Tokyo, Seoul, Jakarta, Bengaluru and beyond. At InMobi Advertising , you’ll have the opportunity to shape how billions of users connect with content, commerce, and brands worldwide. To learn more, visit www.inmobi.com About the job Who are we and What do we do? InMobi Group’s mission is to power intelligent, mobile-first experiences for enterprises and consumers. Its businesses acro

About Appspace: At Appspace, we’re passionate about creating better work experiences for people everywhere, and we’re looking for people that feel the same way. Our global office locations and flexible work culture help you work wherever and however you’re at your best. Plus, we take the time to help you enjoy your work, build lasting connections, and grow your role. Join the Appspace team and be a part of a culture that’s helping people everywhere love where they work. Your Role as a Security Architect : We’re looking for a Security Architect with a passion for securing Artificial Intelligence platforms, AI-driven code analysis, MCP security testing, promoting OWASP Top-Ten testing standards and supporting the Security Engineering program through the Software Application Maturity Model. A proven history of leading complex security transformations. This is a hands-on, deeply technical role, not an advisory position, ideal for someone who thrives at the intersection of engineering, security and client engagement. You'll use your expertise to penetration test cloud security, software security, and AI platforms whilst leading clients through high-impact security initiatives. A key focus of the role is conducting forensic investigations across cloud platforms (AWS, Azure, GCP), including containerized environments like Kubernetes. In this role, you'll lead the architecture. design and implementation of modern security solutions, working directly with engineering teams to embed AI and Software Development best practices across their teams. You’ll get your hands dirty configuring, maintaining, and remediating infrastructure—particularly within Google Cloud or Microsoft Azure—including networks, firewalls, and web application firewalls. If you’re looking to lead, build, and solve real-world security problems in the cloud, this role was built for you. A Day in the Life of a Security Architect : Lead and execute security transformation initiatives fo

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. Lyft connects people to transportation to change the way we live and get around our communities. Lyft’s engineering team is growing rapidly, and we are looking for Technical Program Managers to help us scale. Come be part of a new team at Lyft focused on enabling and empowering engineering teams to deliver at scale. Our drivers and passengers entrust Lyft with their personal information and travel details to get where they're going and expect us to keep that data safe. Lyft's security team leads efforts across the company to ensure our systems are secure and worthy of our users' trust. The security team designs and builds Lyft's security architecture, consult with other teams as they build and launch new products and features, proactively plans for the unexpected, and responds to incidents that occur. Our work affects the entire company and takes place at all levels of the stack, from infrastructure to web application security, as well as mobile apps, IT, and autonomous vehicles. We try to approach security from a software engineering standpoint. We believe in scaling security through automation and tooling and we ship frequently. Check out our blog posts at https://eng.lyft.com/tagged/security to learn more about some of the things we’ve built. We’re looking for the right person to join our team to perform service and application security review, and move us along our maturity journey. In order to be scalable, each secure product quality gate must be automated and integrated into our software release pipeline. Our grand vision is a fully automated series of quality controls that constantly validate that our

Note: if you are an intern, new grad, or staff applicant, please do not apply using this link and visit our jobs page for those specific postings. Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the Organization Secure Frameworks: We provide security guarantees for common threats, helping teams secure their services by default. We build and maintain core application-layer security libraries and frameworks for development teams, including web security frameworks, cryptography libraries, and other threat mitigations across the Stripe technology stack. More recently, our scope has expanded to protective measures for AI agents. We are a hands-on engineering team that builds security protections and frameworks, rather than conducting security reviews. Core Infrastructure : We’re the home for Stripe's critical tier0 infrastructure systems (Compute, Networking, DocumentDB, Distributed Caching and High assurance engineering). We build the foundational platform for Stripe products and services to allow them to operate at scale. We drive reliability, availability, efficiency and scalability of these systems. Developer Infrastructure : We’re responsible for the productivity of all developers at Stripe. Ensure Stripe’s engineers have a reliable, fast, and easy-to-use inner dev loop to maximize productivity while building everything from low-latency microservices to large-scale data pipelines and machine learning models. Reliability Insights and Excellence : We build tools and frameworks

ABOUT THE TEAM We’re shaping the future of financial technology at Trendyol. As Trendyol’s technology teams, we’re not only building for today we’re designing the financial experiences of tomorrow. From payment infrastructure and digital wallets to smart credit systems and personalized financial services, we create solutions that empower millions of users across our ecosystem. With Trendyol Pay, we enable fast, secure, and seamless payment journeys. Through Trendyol Finance, we develop inclusive and accessible products that simplify financial decisions. We are united by a shared purpose:To create a positive impact in our ecosystem by enabling commerce through technology About the Role As an Application Security Engineer, you’ll work closely with Trendyol’s engineering teams to enhance application security across our platforms. You’ll perform web and mobile security testing, validate fixes through code reviews, and provide expert guidance on secure coding practices. In this role, you’ll support our bug bounty program, develop custom security tools, and help drive root-cause analysis and remediation. We’re looking for a collaborative, open-minded teammate who is eager to improve, communicate clearly, and promote security best practices throughout the organization.

About Backblaze Backblaze provides reliable, high-availability cloud storage trusted by consumers, SMBs, enterprises, and developers in over 150 countries. Backblaze B2 Cloud Storage supports data-intensive workloads including backup, media, analytics, and modern AI pipelines. Our teams focus on building secure, durable, scalable systems with a strong emphasis on application security from day one and protecting customers to keep them safe. But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. About the Role We are seeking an Application Security Engineer to improve application security across the software used to enable Backblaze B2 Cloud Storage and Computer Backup. The primary role is to build security into how the product is used, how data is stored and how customers can use it. This role will require development skills and application security knowledge to build security into the product and new features. Leveraging AI is key. This is a hands-on role that requires application development knowledge. This role is expected to know and use the latest AI to help with both development and security. The primary requirements include; development in common web languages, application security and AI tool usage. Leverage AI tools and software for Building new and maintaining existing software security features Meeting evolving software security needs in existing software Developing new components as needed Perform security assessments and code reviews on internal and external customer-facing applications Work closely with engineers to remediate security vulnerabilities using AI tools Develop security automation and tooling to improve security Support bug bounty program and vulnerability handling Investigate newly reported vulnerabilities Determine ways to remediate them Provide guidance to engineering based on known vulnerabilities found in existing applications Understanding cryptography and secure authentication Knowled

Sr. Security Engineer, Corporate Security At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. Lyft connects people to transportation to change the way we live and get around our communities. Lyft’s engineering team is growing rapidly, and we are looking for Security Engineers to help us scale. Come be part of a new team at Lyft focused on enabling and empowering engineering teams to deliver at scale. Our drivers and passengers entrust Lyft with their personal information and travel details to get where they're going and expect us to keep that data safe. Lyft's security team leads efforts across the company to ensure our systems are secure and worthy of our users' trust. The security team designs and builds Lyft's security architecture, consult with other teams as they build and launch new products and features, proactively plans for the unexpected, and responds to incidents that occur. Our work affects the entire company and takes place at all levels of the stack, from infrastructure to web application security, as well as mobile apps, IT, and autonomous vehicles. We try to approach security from a software engineering standpoint. We believe in scaling security through automation and tooling and we ship frequently. Check out our blog posts at https://eng.lyft.com/tagged/security to learn more about some of the things we’ve built. We're looking for an engineer to own the security of the systems Lyft employees rely on every day: identity, endpoints, and the data that moves between them. Corporate Security sits where security meets IT, so the work spans detection engineering, platform operations, and the automation that ties them together. We'd rather write code than file tickets, and we measure ourselves on control coverage and time-to-remediate. If you want real ownership over how security works at company scale, this is that role. Responsibiliti

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Data Scientist What is the opportunity? We are seeking a highly skilled and motivated Data Scientist to join our Cyber Analytics team within the Security Solutions Data Science organization. This role is critical to driving advanced analytics initiatives, improving fraud detection capabilities, and supporting strategic decision-making across cybersecurity and payment fraud domains. What will you do? • Gain subject matter knowledge on web application security, commonly exploited cyber vulnerabilities, and methods of online and payment card fraud including the common points of purchase for compromised cards. • Build, develop, and maintain innovative data-driven analytical solutions, including predictive models and machine learning algorithms, on large volumes of data to support analytics and reporting needs across products, markets, and services. • Competently handle large datasets, sifting for patterns and trends and translating those insights into technical rules and solutions. • Combine cybersecurity and transaction data into new and insightful views of fraud and vulnerability across the Mastercard network. • Collaborate with cross-functional teams including product, engineering, and operations to understand product, usage, and data pipelines as well as delivering scalable solutions. • T