Application Security Engineer

Location: Bengaluru

Role - Application Security Engineer
Experience - 4+Yrs
Location - Bangalore

Qualifications & Experienc
e
●

Education:

Bachelor's degree in Computer Science, Cybersecurity, Information Security, or equivalent practical experience
.
●

Experience:

3–5+ years in application security, product security, or penetration testing with strong hands-on skills
.
● Technical Testing:
Demonstrated experience in web application and API security testing; mobile security experience is strongly preferred
.
● Tooling:
Proficiency with at least two of the following:
Accunetix, Burp Suite, OWASP ZAP, Sonar Qube (or other SAST tools), dependency scanning, or secrets scanning tools

.
Technical Knowledge & Skil
ls
● Deep understanding of OWASP Top 10 and API security risks (BOLA/IDOR, mass assignment, rate-limit abuse
).
● Strong grasp of authentication and authorization models, including JWT, OIDC, and session handlin
g.
● Working knowledge of Dev Sec Ops  practices and embedding security testing into CI workflows (Git Hub Actions
).
● Ability to build reproducible proofs and utilize scripting (Python/Node) for light automatio
n.
● Familiarity with Cloudflare WAF/API Shield and API gateway architectures (Kong/AWS API Gateway) is a plu

s.