Application Security Engineer

Tosoft It Solutions; Palakkad; On-site; INR 600,000 - 900,000; Full time

Job summary

Tosoft It Solutions is seeking a security-focused engineer to help protect applications and customer data across development. You will review designs and code, validate vulnerabilities and work with engineers on practical fixes.

You will perform authorised security testing of web applications and APIs, triage findings, support remediation and verify fixes. You will improve secure development practices, dependency checks and security testing in CI/CD environments, collaborating with product teams

Qualifications

• Understanding of web and API security risks, including OWASP vulnerabilities.
• Practical experience reviewing code or testing applications with permission.
• Ability to explain findings and propose fixes.
• Familiarity with programming, HTTP and Linux; cloud IAM or threat modelling is useful.

Responsibilities

• Review authentication, authorisation, data handling and application architecture.
• Perform authorised security testing of web applications and APIs.
• Triage security findings, support remediation and verify fixes.
• Improve secure development practices, dependency checks and security testing in CI/CD.

Skills

OWASP risks

Security testing

Code review

Linux basics

Threat modelling

Tools

HTTP concepts

Job description

Help teams protect applications and customer data throughout development. Review designs and code, validate vulnerabilities and work with engineers on practical, verified fixes.

What Youll Do

• Review authentication, authorisation, data handling and application architecture.
• Perform authorised security testing of web applications and APIs.
• Triage security findings, support remediation and verify fixes.
• Improve secure development practices, dependency checks and security testing in CI/CD.

What You Bring

• Understanding of web and API security risks, including common OWASP vulnerability classes.
• Practical experience reviewing code or testing applications with permission.
• Ability to explain findings, reproduce issues and recommend proportionate fixes.
• Familiarity with programming, HTTP and Linux; cloud IAM or threat modelling experience is useful.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.