Application Security Engineer (Code & Refactoring Specialist)

About the role

Application Security Engineer (Code & Refactoring Specialist) at Codvo in Hyderabad. Focus on reviewing, refactoring, and remediating code for CRA compliance. Collaborate with development teams to embed secure practices into legacy and new code. Responsibilities include conducting code reviews, tuning security scanners, building remediation patterns, and supporting compliance evidence generation. Requires 5-8 years of experience in application security and software development, proficiency in multiple programming languages, and knowledge of secure coding standards. Preferred background includes experience with compliance frameworks and industrial software systems.

What you’ll do

• Conduct static and dynamic code reviews for compliance gaps
• Run and tune security scanners to identify vulnerabilities
• Build secure code remediation patterns
• Collaborate with developers to merge secure fixes
• Maintain compliance-aligned secure coding playbooks
• Support generation of compliance evidence

What you’ll bring

• 5–8 years in Application Security + Software Development
• Strong coding experience in C/C++/.NET/Java/Python
• Hands-on with tools like SonarQube, Semgrep, Snyk, Checkov, Trivy, GitHub Advanced Security
• Knowledge of secure coding standards (OWASP, MISRA, CERT)
• Familiarity with IEC 62443, SOC 2, ISO 27001 requirements in industrial contexts

Nice to have

• Prior experience remediating code for compliance frameworks
• Exposure to manufacturing, O&G, or industrial software systems
• Certifications: CSSLP, CEH, OSWE, or equivalent

Skills