About MBRDI
Mercedes-Benz Research and Development India (MBRDI), headquartered in Bengaluru with a satellite office in Pune, is the largest R&D center for Mercedes-Benz Group AG outside of Germany. Our mission is to drive innovation and excellence in automotive engineering, digitalization, and sustainable mobility solutions, shaping the future of mobility.
Job Title: Application Security Engineer
Job Overview
We are seeking a highly motivated and experienced Application Security Engineer with 4+ years of hands-on technical experience to join our team and drive DevSecOps initiatives. In this role, you will be instrumental in embedding security throughout the software development lifecycle, from design to deployment and operations. You will leverage your expertise in application security, Azure cloud security, and DevSecOps practices to protect our applications and infrastructure. A strong understanding of cloud-native security principles, particularly within the Azure ecosystem, and experience with security tools like Coverity, Jfrog (Xray), BlackDuck, Polaris, and Wiz is essential. Familiarity with the security implications and best practices for Artificial Intelligence (AI) and Machine Learning (ML) systems is also highly valued.
Key Responsibilities:
-
Integrate security tools and processes into the CI/CD pipeline to automate security checks (SAST, DAST, SCA, IaC scanning) using tools like Coverity, Jfrog Xray, BlackDuck, and Polaris.
-
Conduct security reviews, threat modeling, and risk assessments for new and existing applications and services, with a focus on Azure-based deployments and AI/ML components.
-
Collaborate with development and operations teams to implement security best practices and remediate identified vulnerabilities.
-
Utilize Wiz to monitor and improve the security posture of our Azure cloud environments and cloud-native applications.
-
Develop and maintain secure coding guidelines, security standards, and DevSecOps best practices, including those specific to AI/ML systems.
-
Provide security expertise and guidance to development teams throughout the software development lifecycle.
-
Participate in security architecture reviews to ensure security by design for new systems and features, particularly those deployed in Azure and involving AI/ML technologies.
-
Support vulnerability management efforts, including scanning, analysis, prioritization, and tracking of remediation activities.
-
Assist in the evaluation and selection of new security technologies and tools to enhance our DevSecOps capabilities.
-
Stay up-to-date with the latest security threats, vulnerabilities, and industry trends, including advancements in AI/ML security.
