Senior Application Security Engineer

About the role

We are seeking a Senior Application Security Engineer to lead comprehensive security testing across web, mobile, API, network, embedded, and cloud environments. The role involves collaborating with development and DevOps teams to embed security controls throughout the software development lifecycle.

Key responsibilities

• Perform penetration testing and vulnerability assessments on web, mobile, API, network, firmware, and AWS cloud services.
• Conduct threat modeling, attack‑surface analysis, and security architecture reviews.
• Execute ethical hacking and red‑team activities to simulate real‑world attacks.
• Review source code and perform business‑logic testing to uncover hidden vulnerabilities.
• Test embedded firmware, BLE protocols, and perform reverse engineering, static and dynamic analysis.
• Integrate security testing tools (SAST, DAST, SCA, IaC, container scanning) into CI/CD pipelines.
• Validate remediation efforts, produce detailed reports, and present findings to technical and management stakeholders.
• Lead penetration‑testing engagements, mentor junior team members, and provide technical guidance.

Required profile

• Master’s or Bachelor’s degree in Software Engineering, Computer Engineering, Telecommunication Engineering, or Computer Science.
• Minimum 7 years of professional experience in application security.
• Relevant certifications such as CEH, eCPPT, CRTP, OSCP are preferred.

Required skills

• AWS services: IAM, EC2, S3, Lambda, API Gateway, VPC, CloudFront, Cognito.
• Web, API, mobile, network, and embedded firmware security testing.
• Real‑time traffic analysis, network IDS, and packet dissection.
• Threat modeling, security architecture review, and red‑team operations.
• Reverse engineering, static and dynamic analysis of firmware.
• BLE security testing.
• CI/CD integration: SAST, DAST, SCA, IaC scanning, container security scanning.