Application Security Engineer

Atomicwork; Bengaluru; On-site; INR 1,200,000 - 2,100,000; Full time

Benefits offered by this job

Fantastic team

Paid time off — 37 days off every year

Health insurance

Great hardware

Flexible allowances

Team events

Annual outings

Job summary

Atomicwork in Bengaluru is seeking a security-focused software engineer to join our growing team. You will help develop and improve tools for discovering and aggregating security vulnerabilities across our applications, performing manual and automated assessments, and building automated test suites.

You’ll contribute to security-focused code reviews, analyze system services, networks, and applications, and drive integration of SAST into the DevOps pipeline while supporting our bug bounty program.

Qualifications

• Familiarity and ability to explain common security flaws and ways to address them (e.g. OWASP Top 10).
• Experience identifying security issues through code review.
• Proficient in at least one of the CI/CD products - Github actions, ArgoCD, Jenkins
• Proficient in Java or Python
• Familiarity with some common security libraries and tools (e.g. static analysis tools, proxying / penetration testing tools).
• Good understanding of network and web related protocols - TCP, TLS, HTTPS, DNS
• Ability to work effectively in a fast-paced environment.
• Good knowledge in multiple classes of vulnerabilities that includes cross-site scripting, SQL Injection, CSRF, cryptographic related weakness, and code injection.

Responsibilities

• Developing and improving our tools and processes designed for discovering and aggregating security vulnerabilities
• Perform manual & automated assessment of various Atomicwork applications.
• Building repeatable and automated security test suites
• Perform security-focused code reviews
• Analysing system services, spotting issues in code, networks and applications
• Integration and automation of SAST in the DevOps pipeline.
• Support the bug bounty program.

Skills

OWASP Top 10

Code review

CI/CD tools

Java/Python

Security tools

Web protocols

Fast-paced work

Vulnerabilities (XSS, SQLi, CSRF)

Tools

Kubernetes

AWS

Linux

REST/SQL/NoSQL

Job description

Atomicwork is on a mission to revolutionize the world of IT with AI to power seamless interactions and enhanced productivity.

This is based out of our Bengaluru office. We offer competitive pay to employees and practical benefits for their whole family. If this sounds interesting to you, read on.

What we’re looking for (qualifications)

• Familiarity and ability to explain common security flaws and ways to address them (e.g. OWASP Top 10)
• Experience identifying security issues through code review.
• Proficient in at least one of the CI/CD products - Github actions, ArgoCD, Jenkins
• Proficient in Java or Python
• Familiarity with some common security libraries and tools (e.g. static analysis tools, proxying / penetration testing tools).
• Good understanding of network and web related protocols - TCP, TLS, HTTPS, DNS
• Ability to work effectively in a fast-paced environment.
• Good knowledge in multiple classes of vulnerabilities that includes cross-site scripting, SQL Injection, CSRF, cryptographic related weakness, and code injection.

Nice to have:

• Proficient in Kubernetes, AWS & Linux.
• Good understanding if REST architecture framework & SQL & non-SQL databases

What you’ll do (responsibilities)

• Developing and improving our tools and processes designed for discovering and aggregating security vulnerabilities
• Perform manual & automated assessment of various Atomicwork applications.
• Building repeatable and automated security test suites
• Perform security-focused code reviews
• Analysing system services, spotting issues in code, networks and applications
• Integration and automation of SAST in the DevOps pipeline.
• Support the bug bounty program.

What we offer (benefits)

We are big on benefits that make sense to you and your family.

• Fantastic team —the #1 reason why everybody joins us.
• Paid time off — 37 days off every year excluding holidays
• Health insurance — comprehensive health coverage for your entire family.
• Great hardware — premium Apple hardware to help you do your best work.
• Flexible allowances — with hassle-free reimbursements across spends.
• Team events — we cover team meet-ups and celebrations for milestones.
• Annual outings — for everyone to have fun together.

Why we are different (culture)

As a part of Atomicwork, you can shape our company and business from idea to production. Our cultural values also set the bar high, helping us create a better workplace for everyone.

• Agency: Being self-directed, taking initiative, and solving problems creatively
• Taste: Hold a high bar. Sweat the details. Build with care and discernment.
• Ownership: We demonstrate unwavering commitment to our mission and goals, taking full responsibility for triumphs and setbacks.
• Mastery: We relentlessly pursue continuous self-improvement as individuals and teams, dedicating ourselves to constant learning and growth.
• Impatience: We recognize that our world moves swiftly and is driven by an unyielding desire to progress with every endeavor.
• Customer Obsession: We place our customers at the heart of everything we do, relentlessly seeking to understand their needs and exceed their expectations.