Application Security Engineer

Job SummaryWe are looking for application/product security engineers who have hands-on experience finding, analyzing, and fixing software security vulnerabilities. The ideal candidate should have a good combination of application security knowledge and software coding skills.Key ResponsibilitiesIdentify and analyze application security vulnerabilities.Review security findings and determine true positives vs. false positives.Reproduce vulnerabilities and create basic PoCs/test cases.Review and test security fixes and code changes.Perform basic threat modeling and identify application attack risks.Work with software developers to resolve security issues.Track vulnerabilities and ensure they are fixed within required timelines.Use security scanning and development tools such as SAST/DAST, Git, CI/CD, and ticketing systems.Required Skills2–6 years of experience in application security, product security, or Software Security.Good understanding of OWASP Top 10, CWE, CVE, and vulnerability severity.Hands-on coding experience in at least 2 of the following:PythonJavaC++GoExperience with vulnerability testing, reproduction, debugging, or PoC development.Experience reviewing code and validating security fixes.Basic knowledge of Threat Modeling (STRIDE/PASTA is a plus).Familiarity with SAST/DAST security tools.Strong problem-solving and communication skills.Preferred SkillsExperience with microservices or distributed applications.Fuzzing or automated testing experience.Experience working with AI/automated code-generation or security remediation tools.Experience with CI/CD and Git-based development environments.