Application Security Engineer

Remotedxb; Dubai; On-site; AED 180,000 - 280,000; Full time

Benefits offered by this job

Global Medical Coverage

Health & Wellness Focus

Gym, dental, psychological services

Job summary

Growe is seeking an Application Security Specialist to join our security team in Dubai. You will triage findings, perform manual and automated reviews, and conduct hands-on penetration testing of web apps, microservices, and APIs.

You will work with OAuth/OIDC/JWT, OWASP Top 10, and cloud security basics; knowledge of reading modern code is a plus. The role includes growth opportunities and a global benefits program within the iGaming/entertainment advisory space.

Qualifications

• 3 years of experience in Application Security, Product Security, or Penetration Testing.
• Hands-on experience with security scanning and testing tools.
• Solid understanding of OWASP Top 10 and API security concepts.

Responsibilities

• Triage, validate, and prioritize security findings from SAST, SCA, and Secret scanning tools.
• Conduct manual and tool-assisted code reviews to identify security vulnerabilities and logic flaws.
• Perform hands-on penetration testing of web applications, microservices, and APIs.
• Audit REST and GraphQL APIs with a focus on authentication, authorization, and business logic.

Skills

Application security

Penetration testing

English proficiency

Tools

Semgrep

Gitleaks

Trivy

OSV-Scanner

Burp Suite

Nuclei

Subfinder

SQLmap

Metasploit

NetExec

Job description

Responsibilities

• Triage, validate, and prioritize security findings from SAST, SCA, and Secret scanning tools
• Conduct manual and tool-assisted code reviews to identify security vulnerabilities and logic flaws
• Perform hands-on penetration testing of web applications, microservices, and APIs
• Audit REST and GraphQL APIs with a focus on authentication, authorization, and business logic

Requirements

• 3 years of experience in Application Security, Product Security, or Penetration Testing
• Hands-on experience with Semgrep, Gitleaks, Trivy, and OSV-Scanner
• Proficiency with Burp Suite, Nuclei, Subfinder, SQLmap, Metasploit, and NetExec
• Deep understanding of OWASP Top 10 and OWASP API Security Top 10
• Knowledge of identity protocols including OAuth 2.0, OIDC, JWT, SAML, and RBAC/ABAC
• Intermediate English proficiency

Preferred Qualifications

• Ability to read and analyze modern application code
• Basic understanding of AWS cloud security and Kubernetes (K8s) security fundamentals

Benefits

• Global Medical Coverage
• Health & Wellness Focus
• Benefits Programs for gym, dental, and psychological services
• Performance-Driven Rewards
• Growth Opportunities

About the Company

Growe is a leading business advisory and services group in iGaming and Entertainment, providing strategic vision and hands-on expertise to help businesses navigate the industry and achieve sustainable growth.