Zoho (Freshers) Biggest Hiring For Application Engineer For 2021-2026 All Graduates NEW

Zoho (Freshers) Biggest Hiring For Application Engineer For 2021-2026 All Graduates . This is a great opportunity for freshers and early-career professionals looking to kickstart their journey in a global IT services company. The position is based in India and eligible candidates are encouraged to apply online at the earliest. The detailed eligibility criteria and application process are given below.

About Company

Zoho offers beautifully smart software to help you grow your business. With over 150M+ users worldwide, Zoho’s 55+ products aid your sales and marketing, support and collaboration, finance, and recruitment needs—letting you focus only on your business. Zoho respects user privacy and does not have an ad-revenue model in any part of its business, including its free products.

☸️ try Mock interview with expert professionals form industries  : Click here 

Job Overview

An Application Security (AppSec) Engineer secures software by identifying, mitigating, and preventing vulnerabilities throughout the development lifecycle (SDLC). They collaborate with developers to integrate security into code, conduct threat modeling, perform code reviews, and manage automated security testing (SAST/DAST). This role bridges security and development, often focusing on DevSecOps, cloud security, and remediation.

• Conduct risk assessments and Identify, document, and prioritise technical risks across the environment, translating complex vulnerabilities into actionable business risks.
  
• Perform threat modelling for applications, services, and infrastructure to identify attack vectors and security gaps and Lead threat modelling sessions with engineering teams for new features using frameworks like STRIDE.
  
• Manage the end-to-end lifecycle of vulnerabilities found in our software and infrastructure.
  
• Implement and tune SAST (Static), DAST (Dynamic), and IAST (Interactive) tools to ensure high-quality security signals without slowing down development.
  
• Perform manual code reviews for critical business logic that automated tools might miss.
  
• Monitor, triage, and investigate security alerts generated from intrusion detection scripts, SIEMs, and other detection mechanisms. Develop custom scripts (Python, Bash, etc.) to automate repetitive alert handling and incident response workflows.
  
• Analyze suspicious activity, validate incidents, and support incident response and post-incident reviews
  
• Collaborate with development teams to remediate findings and embed security into CI/CD pipelines ensuring code is scanned and verified before deployment.
  
• Document findings, response actions, and security recommendations clearly and effectively

✅ 𝗔𝗧𝗦 𝗦𝗰𝗼𝗿𝗲 𝗖𝗵𝗲𝗰𝗸𝗲𝗿: Click here 

Required Skills: 

• Strong understanding of network protocols, Linux internals, and the MITRE ATT&CK framework.
  
• Solid understanding of threat modeling methodologies (e.g., STRIDE, attack trees) and Hands-on experience with SAST, DAST, and IAST tools.
  
• Hands-on experience with AppSec tooling (e.g., Snyk, Veracode, Checkmarx, Burp Suite, Zap, or Contrast Security).
  
• Proficiency in at least one major language for building security tools and automation.
  
• Familiarity with AWS, Azure, or GCP security services and Infrastructure as Code, along with experience in log analysis, alert tuning, false-positive reduction, and responding to intrusion detection or custom security alerts, is an added advantage.

✅ 𝗔𝗧𝗦 𝗥𝗲𝘀𝘂𝗺𝗲 𝗕𝘂𝗶𝗹𝗱𝗲𝗿: Click here