Application Security Engineer

Whitefield Careers; Bengaluru; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Whitefield Careers in Bengaluru is seeking a security professional with strong experience in Application Security, Vulnerability Assessment, and Penetration Testing. Candidates should be proficient in Java or Python and hold relevant certifications such as CEH or OSCP.

The role involves securing and testing various applications and automating security testing processes. Familiarity with cloud security (AWS/Azure/GCP) is a plus.

Qualifications

• Strong hands-on experience in Application Security, Vulnerability Assessment, and Penetration Testing.
• Proficiency in Java or Python for code review and developing automation scripts.
• Experience securing web applications, mobile applications, APIs, backend services, and databases.

Responsibilities

• Automating security testing processes and integrating security controls into workflows.
• Good understanding of common security vulnerabilities and their mitigations.
• Experience in Agile/DevSecOps environments.

Skills

Application Security (AppSec)

Vulnerability Assessment

Penetration Testing (VAPT)

Java

Python

Secure SDLC

DevSecOps

Cloud Security

Education

Relevant security certifications (CEH, OSCP, GWAPT, CSSLP)

Tools

Burp Suite

OWASP ZAP

SAST

DAST

SCA

Job description

Responsibilities

• Strong hands-on experience in Application Security (AppSec), Vulnerability Assessment, and Penetration Testing (VAPT).
• Proficiency in Java or Python with the ability to understand application logic, review code, and develop automation scripts.
• Experience in securing and testing web applications, mobile applications, APIs, backend services, and databases.
• Hands-on experience with security tools such as Burp Suite, OWASP ZAP, SAST, DAST, SCA, and related security testing tools.
• Good understanding of secure SDLC, DevSecOps, authentication, authorization, and common security vulnerabilities.
• Experience in automating security testing processes and integrating security controls into development workflows.

Qualifications

• Relevant security certifications such as CEH, OSCP, GWAPT, CSSLP, or similar.
• Experience working in Agile/DevSecOps environments.
• Knowledge of cloud security (AWS/Azure/GCP) is a plus.