Application Security Engineer

Required Skills Strong hands-on experience in Application Security (AppSec), Vulnerability Assessment, and Penetration Testing (VAPT). Proficiency in Java or Python with the ability to understand application logic, review code, and develop automation scripts. Experience in securing and testing web applications, mobile applications, APIs, backend services, and databases. Hands-on experience with security tools such as Burp Suite, OWASP ZAP, SAST, DAST, SCA, and related security testing tools. Good understanding of secure SDLC, DevSecOps, authentication, authorization, and common security vulnerabilities. Experience in automating security testing processes and integrating security controls into development workflows.

Preferred Qualifications Relevant security certifications such as CEH, OSCP, GWAPT, CSSLP, or similar. Experience working in Agile/DevSecOps environments. Knowledge of cloud security (AWS/Azure/GCP) is a plus.