Search by job, company or skills

Security Specialist

Early Applicant
  • Posted 2 months ago
  • Be among the first 10 applicants

Job Description

Senior Security Engineer

Experience: 3-8 Years Exp

Salary: 10 to 30 LPA

Preferred Notice Period: 60 Days

Opportunity Type: Onsite (Bengaluru, Karnataka)

Placement Type: Full-time

(*Note: This is a requirement for one of Uplers Clients)

Must have required skills:

Frida, Ghidra, Reverse Engineering

Anakin (YC S21) (One of Uplers Clients) is Looking for:

Senior Security Engineer who is passionate about their work, eager to learn and grow, and committed to delivering exceptional results. If you are a team player, with a positive attitude and a desire to make a difference, then we want to hear from you.

Role Overview Description

About the Role:

We're looking for an experienced engineer to help us understand and interact with web and mobile application APIs in a structured and compliant manner. This includes analysing how apps and websites generate secure API requests, inspecting native/mobile code, and building reliable systems for data extraction, strictly under the terms of service.

Key Responsibilities:

  • Analyse Android apps (Java/Kotlin/native code) to understand API flows and request signing mechanisms.
  • Study browser and JavaScript behaviour to understand how websites structure and secure their API calls.
  • Investigate how common client-side security mechanisms (e.g., token generation, header signing, session validation) are implemented.
  • Build tools or automation scripts to replicate legitimate client behaviour in a compliant and respectful manner.
  • Collaborate with internal teams to integrate and maintain data extraction systems responsibly.

Must-Have Skills:

  • Experience in reverse engineering Android apps (APK analysis, native code inspection).
  • Deep understanding of web technologies, JavaScript execution, and HTTP protocol.
  • Familiarity with client-side security implementations such as token generation, obfuscation, and API protection.
  • Must have a solid understanding of JWT, JWE, cookies, and session management in web and mobile applications.
  • Hands-on experience with tools like Frida, mitmproxy, Burp Suite, Wireshark, Ghidra/IDA Pro or similar.
  • Strong scripting skills (Python, Node.js, etc.).

Nice-to-Have:

  • Background in security engineering, penetration testing, or application security research.
  • Familiarity with CAPTCHA handling methods and automation frameworks (e.g., Puppeteer, Playwright).
  • Experience with mobile app instrumentation (NDK, JNI).
  • Experience working with large-scale distributed systems, as it helps in building scalable and resilient data extraction infrastructure.

About Uplers:

Our goal is to make hiring and getting hired reliable, simple, and fast. Our role will be to help all our talents find and apply for relevant product and engineering job opportunities and progress in their career.

(Note: There are many more opportunities apart from this on the portal.)

So, if you are ready for a new challenge, a great work environment, and an opportunity to take your career to the next level, don't hesitate to apply today. We are waiting for you!

More Info

Job Type:
Industry:
Employment Type:

About Company

Job ID: 128601669

Similar Jobs

Bengaluru, India

Skills:

threat modeling VMwareDASTElkPrometheusGrafanaBash ScriptingIso 27001TerraformSiemPenetration TestingAWSVulnerability ManagementLinux Server AdministrationPython ScriptingCSPMDevSecOpsWafPAMAzureencryption frameworksEDRSASTABACGRC controlsitgcEFK stackSCACI CD pipelines

Bengaluru, India

Skills:

ApisCloud SecurityPowerShellWindowsLinuxMacosSplunkPythonQradarCNAPPXDRAI SIEMEPPIdentity SecurityEDRSentinelOneITDRSOC OperationsMicrosoft Sentinel

Bengaluru, Hyderabad, Pune

Skills:

Core JavaOauthSpring SecuritySso

Bengaluru, India

Skills:

.NETthreat modeling JavaWiresharkTcpHttpThreat AnalysisKali LinuxHttpsBurp SuiteSonarqubeTlsPythonIpOWASP ZAPBlack DuckIEC 62443-4-1

Bengaluru, India

Skills:

ApisPowerShellWindowsLinuxMacosSplunkPythonQradarXDRAI SIEMEPPCNAPP Cloud SecurityEDRIdentity SecurityITDRSOC OperationsMicrosoft Sentinel

Beware of Scammers

We don’t charge money for job offers