Application Security Engineer / White Hat Hacker

Techolution LLC; India; Remote; INR 1,200,000 - 2,800,000; Full time

Job summary

Techolution LLC is seeking an Application Security Engineer to fortify AI-driven solutions. You will perform hands-on security assessments across web apps, APIs, cloud, and Kubernetes, owning vulnerability lifecycle from discovery to remediation.

Collaborate with engineering to embed DevSecOps and secure-by-design systems. Qualified candidates have 3+ years in application security, strong OWASP knowledge, and hands-on testing with Burp Suite or OWASP ZAP.

Qualifications

• 2+ years in Application Security, Ethical Hacking, or Penetration Testing.
• Strong knowledge of OWASP Top 10, Web App Security, and API Security.
• Hands-on testing with Burp Suite and/or OWASP ZAP.
• Ability to read application code and root-cause vulnerabilities.
• Working knowledge of Kubernetes/GKE, IAM, GitHub, and CI/CD security.
• Familiarity with SAST, DAST, and SCA tools and lifecycle role.
• Evidence of finding/validating real-world vulnerabilities via testing or security projects.
• Ability to communicate risk and business impact clearly.

Responsibilities

• Perform hands-on application security assessments and penetration testing across web apps and APIs.
• Identify, exploit, validate, document, and communicate vulnerabilities.
• Assess against OWASP Top 10 and API attack vectors.
• Analyze attack surfaces and security weaknesses in web and API stacks.
• Use Burp Suite and/or OWASP ZAP to test traffic and findings.
• Review code to identify security flaws and support root-cause analysis.
• Evaluate Kubernetes/GKE environments for security risks.
• Identify containers, cloud misconfigurations, and IAM weaknesses.
• Assess GitHub repos and CI/CD pipelines for secrets and insecure practices.
• Work with SAST/DAST/SCA tools across the secure development lifecycle.

Skills

Application Security

Ethical Hacking

Penetration Testing

OWASP Top 10

Burp Suite

OWASP ZAP

Kubernetes/GKE

CI/CD Security

SAST

DAST

SCA

GitHub

Tools

Burp Suite

OWASP ZAP

GitHub

CI/CD Security

Job description

Are you a cybersecurity trailblazer eager to fortify the future of AI? At Techolution, the world's leading Full Enterprise Automation specialist, we're seeking a dynamic Application Security Engineer to join our mission of delivering unparalleled AI ROI. You'll be instrumental in safeguarding our innovative solutions, conducting authorized penetration testing across web applications, APIs, cloud, and Kubernetes, and owning the entire vulnerability lifecycle from identification to remediation. This pivotal role involves embedding robust DevSecOps practices, ensuring critical vulnerabilities are blocked in pipelines, and collaborating directly with engineering teams to build secure-by-design systems that drive our clients' success.

Title : Application Security Engineer / White Hat Hacker

Location :Remote Work

Employment Type: Full-time

Exp Range : 3+ Years

Key Responsibilities:

• Perform hands-on application security assessments and penetration testing across web applications and APIs.
• Identify, exploit, validate, document, and communicate application vulnerabilities.
• Assess applications against the OWASP Top 10 and common API attack vectors.
• Analyze web and API attack surfaces and identify security weaknesses.
• Use Burp Suite and/or OWASP ZAP to intercept, manipulate, analyze, and test application/API traffic.
• Read and understand application source code to identify security flaws and support root-cause analysis.
• Assess Kubernetes/GKE environments for application and cloud-native security risks.
• Identify container vulnerabilities, cloud misconfigurations, excessive permissions, and potential attack paths.
• Assess IAM security, access controls, excessive privileges, and authorization weaknesses.
• Assess security risks in GitHub repositories and CI/CD pipelines, including exposed secrets, insecure practices, dependency risks, and repository weaknesses.
• Work with SAST, DAST, and SCA tools as part of the application security lifecycle.
• Validate the exploitability and business impact of identified vulnerabilities.
• Prioritize vulnerabilities based on business risk and potential impact, not only technical severity.
• Communicate security findings, business impact, and remediation recommendations clearly to engineering and business stakeholders.
• Work with development teams to drive remediation and perform security retesting to validate fixes.

Qualifications

• 2+ years of hands-on experience in Application Security, Ethical Hacking, or Penetration Testing.
• Strong understanding of OWASP Top 10, Web Application Security, and API Security.
• Practical experience using Burp Suite and/or OWASP ZAP for security testing.
• Ability to understand application code and investigate vulnerabilities at their root cause.
• Working knowledge of Kubernetes/GKE, IAM, GitHub, and CI/CD security.
• Familiarity with SAST, DAST, and SCA tools and their role in the software development lifecycle.
• Demonstrated evidence of finding and validating real-world vulnerabilities through penetration testing, bug bounty, security research, CVEs, labs, or production security projects.
• Strong ability to assess and communicate technical risk and business impact.
• Strong communication, ownership, curiosity, problem-solving, and execution skills.
• Security certifications such as OSCP, OSWE, CEH, GIAC, or CREST are a plus, but hands-on experience is more important.

About Techolution:

Techolution is the world's leading FEA - Full Enterprise Automation specialist. We are trusted by boards and executive leaders who need AI with real business outcomes. Despite Gen AI, LLMs, and billions in investment, most enterprise AI programs aren't delivering results.

Techolution fixes that with BPA 4.0. We take the power of big Tech's Generic AI and multiply it with our Expert AI stack - resulting in business process automations that follow the same nuances as domain experts do on the job at an unprecedented speed.

Our platform has delivered over $900M in AI ROI for our clients in less than a year, all while increasing their AI Adoption by 10x.

Our 3 power moves for ROI from AI:

1. Value Finder - We Identify high-impact AI and automation opportunities in enterprises and build solutions that deliver measurable value in as little as 30 days.

2. 100K Challenge: Work on fast-paced AI initiatives where teams build solutions designed to generate 2x ROI within 100 days.

3. GE LEAP: Contribute to enterprise AI transformation through our partnership with Google, helping scale Gemini-driven solutions across organizations.

Visit us @www.techolution.com : To know more about our revolutionary core practices and getting to know in detail about how we enrich the human experience with technology.