Application Security Engineer

About Us: At Milgai.com we are building the next generation of scholarship matching platforms, making higher education accessible to thousands of students. As we scale our web architecture, we are looking for a sharp, hands-on Application Security Engineer to join us on a project-based, flexible model to ensure our web platform is bulletproof.

Please note: This is currently a voluntary, project-based position, perfect for gaining real-world experience, building a strong portfolio, and working alongside a dedicated team.

What You’ll Do:

• Architecture Review: Collaborate with our development team to review the architectural design of our web platform, APIs, and database integration.
• Vulnerability Assessment & Pentesting: Conduct targeted, periodic penetration testing (black-box/gray-box) on our web platform and APIs before major releases.
• Code Review: Review key authorization and data flows.
• Security Guidance: Provide actionable, lightweight recommendations and "to-do" lists for our developers to implement.

What We Are Looking For:

• Hands-on experience in Application Security (AppSec) or Penetration Testing.
• Deep understanding of web security concepts and APIs.
• Experience with web testing tools.
• Self-motivated, independent, and capable of delivering structured vulnerability reports.

What’s in it for you?

• Real-World Production Impact: You’ll be the sole security owner of a web platform that serves real users.
• Maximum Flexibility: Fully remote, highly flexible hours. We work in sprints based on product milestones.
• Killer Portfolio Piece: Gain proven, real-world experience conducting security reviews and pentesting for an active, user-facing web platform. Perfect for adding a solid production-grade security project to your CV/LinkedIn.