← All rolesSecurity Engineering

Application Security Lead — EU Cyber Resilience Act & SBOM

Own technical quality for our new CRA compliance-engineering practice: SBOMs, vulnerability triage, security fixes and the technical file for European clients.

Team
Security Engineering
Location
Remote, India (3–4 h CET overlap)
Type
Contract-to-hire
Experience
6–10 years
Pay
₹28–45 LPA full-time equivalent; contract day rate negotiable
Apply now

About Indrashikha

Indrashikha Educational (OPC) Pvt. Ltd, founded in 2018, designs, builds and runs software, Android apps and AI systems: our own learning platforms used by thousands of students, and engineering for clients. We work remote-first across India, with AI coding tools as everyday colleagues.

What you will do

  • Sign off what is and is not a real vulnerability, and why
  • Lead CRA gap assessments against Annex I (13 product + 8 vulnerability-handling requirements)
  • Run the SBOM practice: CycloneDX/SPDX per release, enriched to BSI TR-03183-2, monitored in Dependency-Track
  • Review AI-assisted triage, write VEX justifications, approve security fixes
  • Threat modelling, risk assessment, CVD policy and Article 14 reporting runbook
  • Join client calls as the security expert

Must have

  • 3–4+ years in application or product security, developer background
  • Reads and reviews JavaScript/TypeScript, Java/Kotlin, Python or Go
  • Hands-on SCA/SBOM (Syft, cdxgen, Grype, Trivy, Snyk) and SAST (Semgrep, CodeQL)
  • Real vulnerability triage experience: CVE/CVSS/EPSS, advisories or VEX
  • OWASP Top 10 / ASVS, auth and session design, CI/CD security gates
  • Clear written English

Nice to have

  • Knows the CRA, NIS2, IEC 62443, ISO 27001 or BSI TR-03183
  • Burp Suite, MobSF, Android or firmware exposure
  • OSWE, CSSLP, OSCP, CISSP
  • Uses AI coding agents and verifies what they produce

How we hire

  1. ApplyThis form, about 5 minutes
  2. Step 2Online assessment, about 60 minutes, within 4 days
  3. Interview 1With the hiring manager
  4. Interview 2Final round
  5. OfferAccepted online

No fees, ever. We never charge a fee to apply, interview, train or join.