Senior Application Security Engineer

1. WebAPI Web3 Smart ContractDApp
2. SDL / DevSecOps SDL/SAST/DAST CI/CD
4. /

1. 2 OWASP Top 10 Web/API
2. Web3 / Web3 DApp Solidity DApp/
3. Burp SuiteSlitherMythrilCheckmarx Python/Go

Key Responsibilities:

1. Code Audit & Penetration Testing: Conduct security code reviews and penetration testing for Web applications, APIs, and Web3 infrastructure (Smart Contracts, DApps, Wallets).
2. SDL & DevSecOps: Drive the Security Development Lifecycle (SDL) by integrating SAST/DAST automation tools into CI/CD pipelines.
3. Incident Response: Handle application-level security incidents, conduct root-cause analysis, and track vulnerability remediation.
4. Security Architecture Review: Participate in product design reviews to identify architectural/logical flaws and provide security hardening solutions.

Requirements:

1. Core AppSec Skills: 2+ years of experience in AppSec or PenTesting; solid knowledge of OWASP Top 10 and web/API vulnerability exploitation.
2. Web3 / Blockchain Experience: Familiar with Web3 threat vectors (e.g., Reentrancy, Flash Loans, Signature Forgery, DApp attacks). Hands-on experience in Solidity auditing or DApp/Wallet testing is a strong plus.
3. Tooling & Automation: Proficient with security tools (e.g., Burp Suite, Slither, Mythril, Checkmarx) and capable of scripting in Python or Go for automation.
4. Communication: Excellent cross-functional communication skills to effectively drive remediation with development teams.