ABOUT REVANTAGE
Revantage, a Blackstone Real Estate portfolio company, is a global provider of corporate services.
With a corporate purpose of ‘In Pursuit of Better,’ Revantage delivers value-added services and world-class talent for Blackstone Real Estate portfolio companies, spanning diverse asset classes, including residential, logistics, office, hospitality and retail sectors. The company’s footprint extends across North America, Europe and Asia Pacific.
Creating a culture that inspires impact and momentum requires the right team. We know what it takes to lead an industry, and are looking for leaders who seek constant growth, want to excel, and continuously improve upon themselves and the industry.
In addition to supporting Revantage, we also recruit for Blackstone Real Estate portfolio companies, giving you the unique opportunity to work within a network of best-in-class professionals across a broad real estate platform.
India
With offices in Bengaluru and Gurugram, our teams in India deliver expertise, innovation and operational excellence that support thousands of assets across logistics, data centers, residential, commercial and hospitality.
Whether you’re building new capabilities, driving critical initiatives or strengthening partnerships, you’ll have the opportunity to truly Build What Matters.
ROLE SUMMARY
We are seeking a mid-level Application Development Security Engineer for , a Blackstone Real Estate portfolio company and the largest owner, manager and developer of high-quality student housing communities in the United States. This role is based in Bengaluru, India, hired through Revantage India and reports to Chief Information Security Officer (CISO).
The Application Development Security Engineer partners with software engineering, DevOps, cloud engineering and product teams to integrate security throughout the Software Development Lifecycle (SDLC). The role champions secure-by-design principles through automated security testing, secure coding practices, CI/CD security controls, cloud-native application security and developer enablement, helping ensure applications remain resilient against modern threats while enabling rapid and secure software delivery.
Working hours will provide meaningful daily overlap with US Central Time. The role also participates in rotating on-call coverage for US nights and weekends and provides coverage on US and India holidays to support uninterrupted operations.
PRIMARY ROLE
Coordinate with the broader Information Security team and perform duties that support its primary mission and priorities.
Integrate security throughout the Software Development Lifecycle using DevSecOps and secure-by-design practices.
Implement and maintain automated security testing and security controls within CI/CD pipelines.
Perform static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), Infrastructure as Code (IaC), API, container and secrets-security assessments.
Conduct application threat modeling, secure-design reviews and application-security architecture reviews for new applications and cloud services.
Identify, prioritize and coordinate remediation of application and software-supply-chain vulnerabilities.
Partner closely with software developers to strengthen secure-coding practices and resolve security findings without unnecessarily slowing delivery.
Develop and maintain security guardrails for Azure DevOps, GitHub, GitLab, Jenkins and other CI/CD platforms.
Secure Infrastructure as Code deployments using Terraform, ARM/Bicep, CloudFormation and similar technologies.
Assess and secure Kubernetes, Docker, serverless, APIs and other cloud-native workloads.
Evaluate open-source dependencies and third-party software for supply-chain risk.
Develop and maintain security standards, reusable templates, developer guidance and enablement materials.
Research emerging application-security threats, assess their relevance to ACC and recommend…