Application Security Specialist India Are you motivated by turning complex security and compliance risks into clear, decision‑ready insights? Do you want to work at the intersection of information security, data compliance and governance in a global organisation? Are you looking to make a tangible impact on how a leading consultancy manages cyber and data‑related risks?If this sounds like you, or you’re curious to learn more, then this role could be the perfect opportunity. Join our Information Security and Data Compliance departmentYour new roleThe Application Security Specialist operates at the intersection of Information Security and Assurance (ISA) and DevSecOps, ensuring that application security is embedded, measurable, and compliant across Ramboll’s global digital landscape and application development.This role focuses on integrating security into engineering workflows while aligning with enterprise security frameworks such as ISO 12207 /ISO/IEC 27001 / CIS 18 and industry best practices like OWASP.The Application Security specialist is responsible for identifying, analyzing, and mitigating security vulnerabilities in applications throughout the software development lifecycle (SDLC). This role works closely with development, DevOps, and security teams to ensure secure coding practices and compliance with organizational and industry standards. You will work closely with RAMTECH, data compliance, regulatory and business teams.Your key responsibilities will be:Alignment &amp; Assurance•Translate security policies into actionable technical controls for development teams •Ensure alignment with:     ISO/IEC 27001     CIS Critical Security Controls     OWASP Top 10 •Support internal/external audits by providing application security evidence andmetrics •Contribute to risk registers, control effectiveness reviews, and exception handlingDevSecOps Enablement•Embed application security controls into CI/CD pipelines across business units •Drive adoption of security-by-design and shift-left security practices •Integrate and manage tools for:          oSAST, DAST, SCA, Secrets Scanning •Partner with DevOps teams to standardize secure pipelines globally Confidential.Application Risk Management• Perform risk-based vulnerability assessments and prioritize remediation • Align risk ratings aligned with Cyber and Information security risk methodology • Track remediation SLAs and report on risk posture to CISO office. • Conduct threat modeling for critical applications and digital solutionsSecurity Testing &amp; Validation• Oversee and/or perform:      o Secure code reviews      o Penetration testing (manual &amp; automated) • Validate vulnerability fixes and ensure closure meets compliance requirements • Establish baseline security requirements for all applicationsDeveloper Security Advisory• Act as a security champion enabler across distributed engineering teams • Provide secure coding guidance and conduct targeted training sessions • Develop reusable secure design patterns and reference architectures.Metrics, Reporting &amp; Continuous Improvement• Define and track KPIs such as:       o Vulnerability density       o Mean Time to Remediate (MTTR)       o % of applications onboarded to DevSecOps pipelines • Build dashboards for leadership visibility and regulatory reporting • Drive continuous improvement initiatives across global teams

Ramboll has launched its management consulting division in the US with a focus on delivering sustainable solutions to our clients, driven by science, engineering, and economics.
Ramboll, a global consulting and engineering firm based in Denmark, delivers a broad range of sustainability consulting services and solutions in the environment &amp; health, water, energy, and manufacturing markets. We serve corporate clients that are mid-size to global players in manufacturing, utilities, private equity, financial services, and real estate. Our clients seek Ramboll&rsquo;s guidance and leadership in decarbonization, transitioning to a low-carbon economy, and developing sustainable, resilient business models.
Fast facts about Ramboll:
<ul>
<li>16,500 employees worldwide</li>
<li>300 offices across 35 countries</li>
<li>1.899 billion Euros in Revenue</li>
<li>6 Markets: Buildings, Transport, Energy, Environment &amp; Health, Water and Management Consulting</li>
</ul>

Application Security Specialist

Application Security Specialist India Are you motivated by turning complex security and compliance risks into clear, decision‑ready insights? Do you want to work at the intersection of information security, data compliance and governance in a global organisation? Are you looking to make a tangible impact on how a leading consultancy manages cyber and data‑related risks?If this sounds like you, or you’re curious to learn more, then this role could be the perfect opportunity. Join our Information Security and Data Compliance departmentYour new roleThe Application Security Specialist operates at the intersection of Information Security and Assurance (ISA) and DevSecOps, ensuring that application security is embedded, measurable, and compliant across Ramboll’s global digital landscape and application development.This role focuses on integrating security into engineering workflows while aligning with enterprise security frameworks such as ISO 12207 /ISO/IEC 27001 / CIS 18 and industry best practices like OWASP.The Application Security specialist is responsible for identifying, analyzing, and mitigating security vulnerabilities in applications throughout the software development lifecycle (SDLC). This role works closely with development, DevOps, and security teams to ensure secure coding practices and compliance with organizational and industry standards. You will work closely with RAMTECH, data compliance, regulatory and business teams.Your key responsibilities will be:Alignment &amp; Assurance•Translate security policies into actionable technical controls for development teams •Ensure alignment with:     ISO/IEC 27001     CIS Critical Security Controls     OWASP Top 10 •Support internal/external audits by providing application security evidence andmetrics •Contribute to risk registers, control effectiveness reviews, and exception handlingDevSecOps Enablement•Embed application security controls into CI/CD pipelines across business units •Drive adoption of security-by-design and shift-left security practices •Integrate and manage tools for:          oSAST, DAST, SCA, Secrets Scanning •Partner with DevOps teams to standardize secure pipelines globally Confidential.Application Risk Management• Perform risk-based vulnerability assessments and prioritize remediation • Align risk ratings aligned with Cyber and Information security risk methodology • Track remediation SLAs and report on risk posture to CISO office. • Conduct threat modeling for critical applications and digital solutionsSecurity Testing &amp; Validation• Oversee and/or perform:      o Secure code reviews      o Penetration testing (manual &amp; automated) • Validate vulnerability fixes and ensure closure meets compliance requirements • Establish baseline security requirements for all applicationsDeveloper Security Advisory• Act as a security champion enabler across distributed engineering teams • Provide secure coding guidance and conduct targeted training sessions • Develop reusable secure design patterns and reference architectures.Metrics, Reporting &amp; Continuous Improvement• Define and track KPIs such as:       o Vulnerability density       o Mean Time to Remediate (MTTR)       o % of applications onboarded to DevSecOps pipelines • Build dashboards for leadership visibility and regulatory reporting • Drive continuous improvement initiatives across global teams

Application Security Specialist

About the Job

About the Company

Ramboll Management Consulting

Similar Jobs

Network Engineer

Network Engineer

Sr. Product Security Engineer

Sr. Product Security Engineer

Specialist, DevSecOps

Specialist, DevSecOps

Information Security Analyst

Information Security Analyst

Sr Security Engineer

Sr Security Engineer

DevSecOps Engineer-Experienced

DevSecOps Engineer-Experienced

Information Security Analyst

Information Security Analyst

R&D Cyber Security Engineer - IN MACH - India Development Centre

R&D Cyber Security Engineer - IN MACH - India Development Centre

Security Systems Engineer

Security Systems Engineer

Security Test Engineer

Security Test Engineer