Hands-On Application Security Engineer for Web & API

Remotedxb; Dubai; On-site; AED 180,000 - 280,000; Full time

Benefits offered by this job

Global Medical Coverage

Health & Wellness Focus

Gym, dental, psychological services

Job summary

Growe is seeking an Application Security Specialist to join our security team in Dubai. You will triage findings, perform manual and automated reviews, and conduct hands-on penetration testing of web apps, microservices, and APIs.

You will work with OAuth/OIDC/JWT, OWASP Top 10, and cloud security basics; knowledge of reading modern code is a plus. The role includes growth opportunities and a global benefits program within the iGaming/entertainment advisory space.

Qualifications

• 3 years of experience in Application Security, Product Security, or Penetration Testing.
• Hands-on experience with security scanning and testing tools.
• Solid understanding of OWASP Top 10 and API security concepts.

Responsibilities

• Triage, validate, and prioritize security findings from SAST, SCA, and Secret scanning tools.
• Conduct manual and tool-assisted code reviews to identify security vulnerabilities and logic flaws.
• Perform hands-on penetration testing of web applications, microservices, and APIs.
• Audit REST and GraphQL APIs with a focus on authentication, authorization, and business logic.

Skills

Application security

Penetration testing

English proficiency

Tools

Semgrep

Gitleaks

Trivy

OSV-Scanner

Burp Suite

Nuclei

Subfinder

SQLmap

Metasploit

NetExec

Job description

Growe is seeking an Application Security Specialist to join our security team in Dubai. You will triage findings, perform manual and automated reviews, and conduct hands-on penetration testing of web apps, microservices, and APIs.

You will work with OAuth/OIDC/JWT, OWASP Top 10, and cloud security basics; knowledge of reading modern code is a plus. The role includes growth opportunities and a global benefits program within the iGaming/entertainment advisory space.