Application Security Engineer

Role Overview
We are looking for an Application Security Engineer with strong hands-on experience in application security testing, vulnerability assessment, and secure SDLC practices across web, mobile, APIs, and LLM applications.

Key Responsibilities
Conduct security assessments, penetration testing, and vulnerability analysis for web, mobile, APIs, and LLM applications.
Actively perform hands-on pentesting/exploitation for web, mobile, API, and LLM applications.
Perform Android security testing, including reverse engineering and static/energetic analysis.
Assess API/microservices security, authentication, authorization, and data protection.
Identify, triage, and support remediation of application vulnerabilities.
Integrate security controls into CI/CD and DevSecOps processes.
Provide secure coding guidance and security training to developers.




Develop security automation/tools and document technical findings and risks.
Stay updated on emerging application security threats.

Required Skills
57 years of experience in Application Security, Penetration Testing, or Secure Software Development.
Strong knowledge of OWASP Top 10 (Web, Mobile, API) and common vulnerabilities.
Hands-on expertise with Burp Suite/ZAP, MobSF, Frida, Postman, etc.
Solid experience in web, mobile, and API security testing.
Experience with LLM/AI application security testing is preferred.
Programming knowledge in Java, Python, JavaScript, or Go.
Understanding of DevSecOps and CI/CD.

Preferred
Certifications: OSWE, OSCP, CEH, GWAPT, CSSLP.
Exposure to Cloud (AWS/Azure/GCP) and Container Security (Docker/Kubernetes).
Solid communication and collaboration skills.

📌 Application Security Delhi
🏢 Airtel
📍 Delhi