Senior Application Security Engineer

We are looking for a Senior Application Security Engineer to secure enterprise applications and AI-powered products across multiple engineering teams and repositories. This role requires strong hands-on security expertise, the ability to operate at scale, and the ability to quickly identify, prioritize, and drive remediation of security risks across multiple products.

Title : Senior Application Security Engineer

Location :Remote Work

Employment Type: Full-time

Exp Range : 3+ Years

Key Responsibilities:

• Own security assessments across enterprise applications, products, repositories, and engineering teams.
• Perform hands-on Web, API, cloud, and Kubernetes security testing, including vulnerability discovery and validation.
• Conduct threat modeling and security assessments for AI/LLM applications, RAG systems, and AI agents.
• Identify AI-specific risks such as prompt injection, data leakage, RAG poisoning, excessive permissions, and unsafe tool calls.
• Identify and prioritize vulnerabilities based on exploitability, business impact, and risk.
• Work directly with engineering teams to drive remediation, retesting, and closure.
• Integrate security into SDLC and CI/CD pipelines using SAST, DAST, SCA, secrets detection, and security gates.
• Establish scalable security practices across multiple products and teams.
• Communicate technical vulnerabilities, business impact, and remediation requirements to engineering and business stakeholders.

Qualifications

• 3+ years of hands-on experience in Product Security, Application Security, or Security Engineering.
• Strong experience with Web/API Security, OWASP Top 10, vulnerability assessment, and threat modeling.
• Proven ability to discover and validate real-world vulnerabilities, beyond automated scanners.
• Experience with Burp Suite/ZAP, source-code security review, and root-cause analysis.
• Experience securing cloud, Kubernetes/GKE, IAM, containers, and CI/CD environments.
• Experience with SAST, DAST, and SCA within the SDLC.
• Practical experience with AI/LLM security, RAG security, or AI agent security.
• Ability to prioritize security risks and drive vulnerabilities through remediation and closure.
• Strong communication and stakeholder-management skills.

Nice to Have:

• GCP/GKE experience
• AI/GenAI application security
• OSCP, OSWE, GIAC, CREST, or equivalent

About Techolution:

Techolution is the world's leading FEA – Full Enterprise Automation specialist. We are trusted by boards and executive leaders who need AI with real business outcomes. Despite Gen AI, LLMs, and billions in investment, most enterprise AI programs aren't delivering results.

Techolution fixes that with BPA 4.0. We take the power of big Tech's Generic AI and multiply it with our Expert AI stack — resulting in business process automations that follow the same nuances as domain experts do on the job at an unprecedented speed.

Our platform has delivered over $900M in AI ROI for our clients in less than a year, all while increasing their AI Adoption by 10x.

Our 3 power moves for ROI from AI:

1. Value Finder - We Identify high-impact AI and automation opportunities in enterprises and build solutions that deliver measurable value in as little as 30 days.

2. 100K Challenge: Work on fast-paced AI initiatives where teams build solutions designed to generate 2× ROI within 100 days.

3. GE LEAP: Contribute to enterprise AI transformation through our partnership with Google, helping scale Gemini-driven solutions across organizations.

Visit us @www.techolution.com : To know more about our revolutionary core practices and getting to know in detail about how we enrich the human experience with technology.