Role Overview :

As an Application Security Engineer, you will serve as a critical guardian of our digital ecosystem, ensuring that our web and mobile platforms remain resilient against evolving cyber threats.

You will work closely with cross-functional engineering teams, product managers, and DevOps squads to integrate security best practices directly into the software development lifecycle.

By proactively identifying vulnerabilities and architecting robust defense mechanisms, you will directly impact the trust and safety of our end-users, ensuring that our business operations remain secure, compliant, and scalable in a competitive market.

Key Responsibilities :

- Conduct comprehensive security assessments and penetration testing on web and mobile applications to identify and remediate critical vulnerabilities before they reach production.

- Collaborate with software developers to provide actionable guidance on secure coding practices, ensuring that security is baked into the product architecture from the ground up.

- Manage and execute automated security testing workflows within the CI/CD pipeline to maintain a high velocity of deployment without compromising our security posture.

- Lead incident response efforts and threat modeling exercises to anticipate potential attack vectors and strengthen our overall defensive strategy against emerging threats.

- Maintain compliance with industry standards and internal security policies, translating complex technical risks into clear insights for stakeholders and leadership teams.

Required Skillset :

- Demonstrated expertise in identifying and mitigating risks associated with the OWASP Top 10, with a deep understanding of common web and mobile application vulnerabilities.

- Proven ability to perform manual and automated security testing, utilizing industry-standard tools to secure complex application architectures.

- Strong communication skills with the ability to articulate technical security findings to non-technical stakeholders, fostering a culture of security awareness across the organization.

- A proactive mindset with the ability to adapt to a hybrid work environment in Bangalore or Mumbai, collaborating effectively with distributed teams to solve high-stakes security challenges.

- A solid foundation in computer science or a related technical field, complemented by 1 to 6 years of hands-on experience in securing enterprise-grade applications.