Application Security Engineer

Atomicwork Inc; Bengaluru; On-site; INR 800,000 - 1,500,000; Full time

Benefits offered by this job

Comprehensive health coverage

Unlimited sick leaves

Flexible work timings

Paid time off

Premium Apple hardware

Team events and outings

Job summary

A technology company in Bengaluru is looking for a skilled security engineer to assess vulnerabilities and implement automated evaluation processes. The role requires expertise in security flaws, CI/CD tools, and programming languages like Java or Python. Candidates should be able to thrive in a fast-paced environment and possess a strong understanding of network protocols. This position comes with comprehensive health insurance, flexible work timings, and other attractive benefits.

Qualifications

• Experience identifying security issues through code review.
• Proficient in at least one CI/CD product.
• Good understanding of network and web protocols.
• Ability to explain common security flaws.

Responsibilities

• Develop and improve tools for discovering security vulnerabilities.
• Perform security assessments of various applications.
• Build automated security test suites.
• Conduct security-focused code reviews.
• Analyze system services for vulnerabilities.
• Integrate SAST into the DevOps pipeline.

Skills

Familiarity with security flaws

Code review

Proficient in CI/CD products

Java or Python

Knowledge of security libraries

Understanding of network protocols

Ability to work in fast-paced environment

Knowledge of vulnerabilities

Kubernetes

AWS

Linux

REST architecture

SQL & non-SQL databases

Job description

What we’re looking for (qualifications)

Familiarity and ability to explain common security flaws and ways to address them (e.g. OWASP Top 10)

Experience identifying security issues through code review.

Proficient in at least one of the CI/CD products - Github actions, ArgoCD, Jenkins

Proficient in Java or Python

Familiarity with some common security libraries and tools (e.g. static analysis tools, proxying / penetration testing tools).

Good understanding of network and web related protocols - TCP, TLS, HTTPS, DNS

Ability to work effectively in a fast-paced environment.

Good knowledge in multiple classes of vulnerabilities that includes cross-site scripting, SQL Injection, CSRF, cryptographic related weakness, and code injection.

Nice to have:

Proficient in Kubernetes, AWS & Linux.

Good understanding if REST architecture framework & SQL & non-SQL databases

What you’ll do (responsibilities)

Developing and improving our tools and processes designed for discovering and aggregating security vulnerabilities

Perform manual & automated assessment of various Atomicwork applications.

Building repeatable and automated security test suites

Perform security-focused code reviews

Analysing system services, spotting issues in code, networks and applications

Integration and automation of SAST in the DevOps pipeline.

Support the bug bounty program.

What we offer (benefits)

We are big on benefits that make sense to you and your family.

Fantastic team—the #1 reason why everybody joins us.

Convenient offices— well-located offices spread over five different cities.

Flexible work timings— you get to decide how you want to work.

Paid time off— Unlimited sick leaves and 24 days off every year.

Health insurance— comprehensive health coverage for your entire family.

Great hardware— premium Apple hardware to help you do your best work.

Flexible allowances— with hassle-free reimbursements across spends.

Team events— we cover team meet-ups and celebrations for milestones.

Annual outings— for everyone to have fun together.

Why we are different (culture)

As a part of Atomicwork, you can shape our company and business from idea to production. Our cultural values also set the bar high, helping us create a better workplace for everyone.

Autonomy: We champion self-direction to deliver customer success, empowering teams and individuals to deliver peak performance.

Taste: Hold a high bar. Sweat the details. Build with care and discernment.

Ownership: We demonstrate unwavering commitment to our mission and goals, taking full responsibility for triumphs and setbacks.

Mastery: We relentlessly pursue continuous self-improvement as individuals and teams, dedicating ourselves to constant learning and growth.

Impatience: We recognize that our world moves swiftly and is driven by an unyielding desire to progress with every endeavor.

Customer Obsession: We place our customers at the heart of everything we do, relentlessly seeking to understand their needs and exceed their expectations.

What next (applying for this role)

Click on the apply button to get started with your application.

Answer a few questions about yourself and your work.

Wait to hear from us about the next steps.

Do you have anything else to tell us? [e-mail] and let us know what’s on your mind.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file. We do not discriminate on the basis of any protected group status under any applicable law.

As a government contractor subject to VEVRAA, we request this information to measure the effectiveness of our outreach and positive recruitment efforts. Categories include: disabled veteran, recently separated veteran, active duty wartime or campaign badge veteran, armed forces service medal veteran. This form is voluntary and confidential. Details and definitions are provided in the full description of the form.

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.