Application Security Engineer

Responsibilities :

• Conduct security assessments for web, Android, and iOS applications.
• Identify and remediate vulnerabilities across the platform such java and java script
• Promote a security-first culture and drive security integration in the SDLC.
• Maintain and update security policies, standards, and procedures.
• Support ISMS design, implementation, and maintenance.
• Assist with ISO 27001 and PCI DSS certification and audits.
• Manage third-party risk programs, including vendor assessments and ongoing monitoring.
• Maintain vendor risk register and track remediation actions.
• Collaborate with internal teams to prepare for audits and ensure compliance.
• Adapt to new technologies, languages, and frameworks as needed.

Requirements :

• Minimum 3 years of experience in Application Security.
• CEH and OSCP Certification
• Strong knowledge of security frameworks - Owasp top10 , secure coding, and threat modeling.
• Deep understanding of SDLC application security threats (e.g., XSS, SQL Injection, CSRF, buffer overflows, business logic flaws, brute force).
• Strong understanding of Java, Java script and python
• Experience with security tools (Static Code Analysis, DAST, Penetration Testing)
• Hands-on experience with security assessments in microservice architectures.
• Familiarity with authentication flows, payment gateway integration, and business logic security.
• Experience supporting ISO 27001 and PCI DSS compliance.
• Ability to work independently in a fast-paced environment.
• Passionate and practical approach to security challenges
• Strong Problem Solving and analytical skills.
• Accustomed to dealing with ambiguity in a fast-paced environment
• Proven ability to collaborate successfully across cross functions..