Application Security Engineer

Required Skills

Strong hands-on experience in Application Security (AppSec), Vulnerability Assessment, and

Penetration Testing (VAPT).

Proficiency in Java or Python with the ability to understand application logic, review code, and

develop automation scripts.

Experience in securing and testing web applications, mobile applications, APIs, backend

services, and databases.

Hands-on experience with security tools such as Burp Suite, OWASP ZAP, SAST, DAST, SCA, and

related security testing tools.

Good understanding of secure SDLC, DevSecOps, authentication, authorization, and common

security vulnerabilities.

Experience in automating security testing processes and integrating security controls into

development workflows.

Preferred Qualifications

Relevant security certifications such as CEH, OSCP, GWAPT, CSSLP, or similar.

Experience working in Agile/DevSecOps environments.

Knowledge of cloud security (AWS/Azure/GCP) is a plus.