Application Security Engineer

Juuuno Inc.; Sector 10; In loco; INR 1.500.000 - 2.100.000; Tempo pieno

Descrizione del lavoro

Juuuno Inc. is seeking a hands-on Application Security Engineer to own product security across social, dating, health, fintech, astro, and AI products.

You will embed security into architecture, development, and operations while protecting user data and credentials. The role requires 5–8 years in application, API, or cloud security with strong OWASP knowledge and experience securing OAuth/OIDC, tokens, secrets, and multi-tenant SaaS on AWS.

Competenze

• 5–8 years in application, API, or cloud security.
• Strong knowledge of OWASP Top 10 and OWASP API Security.
• Hands-on experience securing OAuth/OIDC, tokens, secrets, and multi-tenant SaaS.
• AWS security across IAM, KMS, networking, logging, and Kubernetes.
• Threat modelling, secure code review, and practical penetration testing.

Mansioni

• Create threat models, abuse cases, and security requirements for apps, APIs, and AI workflows.
• Define controls for authentication, OAuth/OIDC, secrets, encryption, RBAC, and tenant isolation.
• Review architecture and code for OWASP risks, SSRF, injection, and privilege escalation.
• Set up SAST, DAST, dependency, secret, and container scanning in CI/CD.
• Perform hands-on web, API, and cloud security testing.
• Review AI features for prompt injection, data leakage, and unsafe tool use.
• Build incident-response playbooks and lead investigation and remediation.
• Define privacy controls for data retention, deletion, and sensitive data handling.
• Train engineers, prioritise findings by real risk, and verify fixes before closure.

Conoscenze

Application security

API security

Cloud security

OWASP Top 10

OAuth/OIDC

SAST/DAST

Penetration testing

Python scripting

Kubernetes security

Incident response

Strumenti

AWS

Descrizione del lavoro

Job Summary

We are seeking a hands-on Application Security Engineer with strong expertise in web, API, cloud, and AI security. The ideal candidate will own product security across multiple consumer products in Social, Dating, Health, Fintech, Astro, and AI, embedding practical security into architecture, development, and operations while protecting user data and credentials.

Key Responsibilities

• Create threat models, abuse cases, and security requirements for apps, APIs, and AI workflows.
• Define controls for authentication, OAuth/OIDC, secrets, encryption, RBAC, and tenant isolation.
• Review architecture and code for OWASP risks, SSRF, injection, and privilege escalation.
• Set up SAST, DAST, dependency, secret, and container scanning in CI/CD.
• Perform hands-on web, API, and cloud security testing.
• Review AI features for prompt injection, data leakage, and unsafe tool use.
• Build incident-response playbooks and lead investigation and remediation.
• Define privacy controls for data retention, deletion, and sensitive data handling.
• Train engineers, prioritise findings by real risk, and verify fixes before closure.

Preferred candidate

• 5-8 years in application, API, or cloud security.
• Strong knowledge of OWASP Top 10 and OWASP API Security.
• Hands-on experience securing OAuth/OIDC, tokens, secrets, and multi-tenant SaaS.
• AWS security across IAM, KMS, networking, logging, and Kubernetes.
• Threat modelling, secure code review, and practical penetration testing.
• Scripting in Python or Bash for security automation.
• Clear communication during incidents, with a risk-first mindset.

Good to have: Kubernetes security; LLM/AI security and red teaming; SOC 2 or ISO 27001; OSCP, CISSP, or CSSLP certification.

Why Join Us?

You will get the opportunity to work on multiple products across different industries rather than maintaining a single application.

Our product portfolio spans: Social | Dating | Health | Fintech | Astro | AI | Consumer Technology

One of our existing products is already serving 1.5M+ users, while several new products are currently being planned and developed.

If you are excited about building products from the ground up, solving challenging engineering problems, and creating some of the best consumer applications in the industry, this role could be a great opportunity.