Application Security Engineer

Overview

Application Security Engineer responsible for identifying and addressing security vulnerabilities across applications, code, networks, and DevOps processes.

What you'll do

• Develop tools and processes for discovering and aggregating security vulnerabilities.
• Perform manual and automated security assessments of applications.
• Build repeatable and automated security test suites.
• Conduct security-focused code reviews.
• Analyse services, code, networks, and applications for security issues.
• Integrate and automate SAST in the DevOps pipeline.
• Support the bug bounty program.

What you'll need

• Explain common security flaws and remediation approaches, including the OWASP Top 10.
• Experience identifying security issues through code review.
• Proficiency with at least one of GitHub Actions, ArgoCD, or Jenkins.
• Proficiency in Java or Python.
• Knowledge of security libraries, static analysis, proxying, and penetration testing tools.
• Understanding of TCP, TLS, HTTPS, and DNS.
• Knowledge of vulnerabilities including XSS, SQL injection, CSRF, cryptographic weaknesses, and code injection.

Nice to have

• Proficiency in Kubernetes, AWS, and Linux.
• Understanding of REST architecture and SQL and NoSQL databases.

Details

• Hybrid position based in Bengaluru, Karnataka.