Application Security Engineer

What You Will Do

As an Application Security Engineer, you will act as a bridge between offensive security and engineering teams. You will leverage your penetration-testing mindset to proactively improve the security of applications throughout their lifecycles. This includes partnering with developers to identify and remediate vulnerabilities, contributing to secure design decisions, participating in threat modeling, and conducting security reviews. You will help build scalable, repeatable security practices that reduce risk across the product.

Responsibilities

• Validating and prioritizing vulnerabilities from PTs, bug bounties, and tools
• Collaborating with engineering teams on remediation
• Participating in application security reviews
• Supporting Secure Software Development Lifecycle (SSDLC)
• Managing and using SAST, DAST, and SCA tools
• Developing security standards and best practices.

Requirements:

• 3–5 years of hands-on experience as a Penetration Tester (Web and API)
• Strong expertise in performing manual penetration testing (not tool-only)
• Deep understanding of OWASP Top 10 and OWASP Top 10 for LLM
• Ability to read and understand code in C#, JavaScript
• Knowledge of OWASP ASVS (Application Security Verification Standard)
• Strong communication skills with developers
• Strong English proficiency (written and spoken)
• Familiarity with cloud environments (AWS, Azure, or GCP)
• Experience with bug bounty programs or Red Team activities (advantage)
• Experience performing Application Security Reviews (advantage)