App Security Engineer

Hyderabad, Telangana, India

Job-Type: full-time |


App Security Engineer

Job Description

Application Security

  • Conduct manual pentest on web application, APIs.
  • Conduct Mobile application pentest.
  • Tuning DAST rules to reduce false positives
  • DAST findings to determine risk priority rating accurately
  • Identifying the responsible team for remediations and working to understand the remediation required and plan the work.
  • SAST scanning (Node js, Java)
  • Tuning SAST rules to reduce false positives
  • Triaging SAST security hotspots and working to understand the remediation required and plan the work.
  • Threat Modelling / Secure Architecture Review
  • Collaborate with architects and other stakeholders to identify the key risks of the features we are building, document the data flows and system changes, record the strategies to be employed to mitigate the identified risks.
  • Create a remediation plan and track the implementation.
  • Third party software component security Testing
  • Review Third Party software as per company policy
  • Scan and triage dependency scanner result.
  • Work with developers on remediation plans.
  • Tune scanner to reduce false positives not create duplicate work

You'll be successful with the following qualifications:


  • BE/ in Computer Science or equivalent stream: Preferred

Must Have Skills:

  • Experience to handle queries for Google Cloud, AWS, and Azure
  • Must have experience with Windows, Linux and MAC devices.
  • Desired information about EDR/XDR tool, email gateway, forensic analysis, threat hunting, tenable, Wireshark, TCPDump
  • Programming languages: Python, Go or Pearl
  • Have worked individually over Hack the box or any other open-source platform as blue team player or bug bounty experience will be an advantage.
  • Certifications or Training: CompTIA Security+ or C|EH

About Castlight Health

Castlight health India, a Great Place to Work® certified organization is part of brand apree health Inc.

Castlight Health / apree health, Inc is transforming lives through better health.

Castlight / apree Health is building the first integrated health network that combines data-driven 
personalization, a coordinated care model, and aligned incentives to unlock value and make life better for those we serve.

We are integrating navigation data and technology with best-in-class advanced primary care to pioneer and scale value-based care in the commercial market. We deliver the industry’s leading navigation experience using data, technology, and a team of clinical experts.


Find Us

Our offices in Hyderabad are located in Salarpuria Knowledge City.

Located along the high-tech city corridor of Hyderabad, our office neighbours respected business and MNCs, hotels, multi-purpose shopping and wellness developments as well as provides ideal accessibility to major transport links.

However, the wellbeing and safety of our employees is of paramount importance and our offices are temporarily closed for business, in view of the ongoing COVID-19 pandemic.

We are currently working from home with hiring interviews and onboarding conducted virtually.

Join us

Castlight is an equal opportunity employer. Should your resume be shortlisted, a member of our hiring team will reach out to validate your details to evaluate fit.

Our technical assessment includes upto three rounds of interview followed by a managerial/ leadership interview for cultural fitment before a decision to an offer for employment is considered.

Follow us

For more information visit

Castlight Health provides equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, pregnancy, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Castlight Health will provide reasonable accommodations for qualified individuals with disabilities.

Castlight Health does not accept unsolicited assistance from recruitment search firms for employment opportunities. All resumes submitted by search firms to any employee at Castlight Health via email, the Internet or in any form and/or method without a signed search agreement on Castlight’s form in place ahead of time will be deemed the sole property of Castlight Health. In such cases, no fee will be paid or payable in the event the candidate is hired by Castlight as a result of the submission.