Application Security Engineer

About Us:

Curefit Healthcare Pvt Ltd, founded in 2016, is Indias largest fitness company and wellness platform. Cult, from the house

of Curefit, was established with a mission to make fitness easy, fun and accessible to everyone, and has emerged as a

community celebrating the joy of fitness. The brand today offers a range of fitness services ranging from group workouts,

gyms and personalized fitness solutions, as well as an expansive selection of quality fitness products for the everyday

athlete. The company’s vision is to empower everyone towards an active and healthier lifestyle through innovative fitness

solutions, enabled by technology.

Job Requirements:

• Minimum of 2+ years of in-depth experience in Application Security, with a focus on Web and Mobile Applications.
• Ability to Develop and implement automated tools (python/bash) to help spot known security exposures.
• Excellent understanding of security by design principles and architecture level security concepts.
• Experience and knowledge of penetration testing tools and methodologies.
• Up to date knowledge of current and emerging security threats and techniques for exploiting security

vulnerabilities.

• Competency in Cyber Security Risk Analysis.
• Understanding of application protocols, development, and common attack vectors.
• Proficiency in at least one scripting language, such as Bash, Python, Go etc.
• Experience with Secure Code Quality Tools like Sonarqube, Fortify etc.
• Experience with pentest tools and frameworks such as: Burp Suite, Kali open-source tools, OWASP ZAP, Metasploit,

Nessus, Nmap, MobSF, Genymotion, Frida, APK Tool etc.

Good To Have

• Understanding of public cloud technologies with hands-on technical knowledge of at least one major public cloud

like AWS.

• Understanding of CI/CD pipelines, Jenkins etc.
• Certifications like CEH, eJPT, LPT, AWS Certified Security Specialty, Certified Cloud Security Professional (CCSP), OSCP,

OSWE/AWAE, SANS etc.

What are your responsibilities?

• Join a team dedicated to maintaining Curefit's world-class security posture.
• Conduct design reviews of upcoming features from an application security perspective, identifying potential threats

and proposing mitigations.

• Develop security tools to monitor for security and compliance controls in real time.
• Develop a broad understanding of the curefit products and pro-actively update the threat model and implement

mitigations.

• Improve secure software development practices.

• Create a roadmap of pentesting curefit assets and automate your test cases.
• Collaborate with the Product Team to ensure adherence to Security Standards.

Note: Only Devops need not apply.