Search Jobs
Search by job, company or skills
Search by job, company or skills
Role - Application Security Engineer
Experience - 4-7 yrs
Location - Bangalore
Qualifications & Experience
● Education: Bachelor's degree in Computer Science, Cybersecurity, Information Security, or equivalent practical experience.
● Experience: 3–5+ years in application security, product security, or penetration testing with strong hands-on skills.
● Technical Testing: Demonstrated experience in web application and API security testing; mobile security experience is strongly preferred.
● Tooling: Proficiency with at least two of the following: Accunetix, Burp Suite, OWASP ZAP SonarQube (or other SAST tools), dependency scanning, or secrets scanning
tools.
Technical Knowledge & Skills
● Deep understanding of OWASP Top 10 and API security risks (BOLA/IDOR, mass assignment, rate-limit abuse).
● Strong grasp of authentication and authorization models, including JWT, OIDC, and session handling.
● Working knowledge of DevSecOps practices and embedding security testing into CI workflows (GitHub Actions).
● Ability to build reproducible proofs and utilize scripting (Python/Node) for light automation.
● Familiarity with Cloudflare WAF/API Shield and API gateway architectures (Kong/AWS API Gateway) is a plus.
Job ID: 148483413
Skills:
threat modeling , input validation, Owasp Top 10, Penetration Testing, Security Assessments, rate-limiting controls, traffic analysis, Reverse Engineering, audits, thick client application security testing, OWASP API Security Top 10
Skills:
DAST, Config, Bash, Burp Suite, Kms, Iam, Waf, Kubernetes, Python, AWS, OPA, Gatekeeper, Aqua, Go, Security Hub, Kyverno, ZAP, SAST, Falco, GuardDuty, Prisma
Skills:
DevSecOps, Application Security, PowerShell, Bash, Coverity, Python, Azure Cloud Security, Polaris, Wiz, BlackDuck, Jfrog Xray
Skills:
threat modeling , Oauth2, Node.js, Jwt, Django, React, Burp Suite, Gcp, Docker, Sonarqube, Owasp Top 10, FastAPI, Azure, Kubernetes, AWS, SANS CWE Top 25, Zap, Trivy, Semgrep, OIDC
Skills:
Kubernetes, Owasp Top 10, Docker, SANS Top 25
We don’t charge any money for job offers
