Company Description CogniCor | AI for Financial Advisors builds intelligent solutions that help Registered Investment Advisors (RIAs) operate with greater efficiency and insight.

Its Advisor

Copilot platform serves as an intelligence layer that transforms how advisors manage each client household, from reviews and AI-assisted meetings to automation of routine tasks and decision support. The platform also enables advisors to prioritize their book of business through targeted insights and recommended actions. At the firm level, CogniCor provides tools for management to analyze advisor performance and strategically direct business growth. Candidates joining CogniCor will contribute to products that directly impact how financial advisory practices scale and deliver value to clients.

Application Security Engineer (VAPT / Penetration Tester)

Experience: 3–6 years Employment Type: Contract / Part-time / Full-time Contract Joining: Immediate

Must-Have Technical Skills

1. Application Security Testing

- Hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT).
- Strong knowledge of OWASP Top 10 and OWASP API Security Top 10.
- Experience testing web applications, REST APIs, authentication, and authorization mechanisms.
- Ability to identify SQL Injection, XSS, CSRF, SSRF, IDOR, broken access controls, and other security vulnerabilities.

2. Security Testing Tools
- Burp Suite (Professional preferred)
- OWASP ZAP
- Postman

3. Cloud & Infrastructure Security
- Experience assessing applications hosted on Microsoft Azure.
- Understanding of Azure App Services, AKS, API Management, and cloud security configurations.
- Knowledge of container and Kubernetes security.
- Familiarity with network security, TLS/SSL,



and secure API communication.

4. Authentication & API Security
- OAuth 2.0, OpenID Connect, JWT, and SSO security testing.
- API authorization, session management, token security, and rate-limiting assessments.
- Experience testing third-party integrations and access controls.

5. Security Reporting & Remediation
- Ability to prepare detailed vulnerability assessment reports with severity classifications using CVSS.
- Provide proof of concept, impact analysis, and recommended fixes.
- Work with development teams to validate remediation.
- Perform security regression testing after application releases.

Good-to-Have Skills

- Experience with SAST, DAST, and Software Composition Analysis (SCA).
- Knowledge of DevSecOps and CI/CD security integration.
- Familiarity with SOC 2 Type II and ISO 27001 security requirements.
- Experience testing AI/LLM-based applications, including prompt injection, sensitive data exposure, and insecure tool/API interactions.
- Python scripting for security testing automation.
- Certifications such as OSCP, eWPT, CEH, or CompTIA Security+.

Key Expectations The candidate should be capable of independently performing security assessments across our applications, identifying vulnerabilities before production releases, and continuously working with engineering teams to improve application security. Important: We are looking for a hands-on penetration tester, not just a security compliance or audit skilled.

- Recommended hiring priority: Strong expertise in Web Application Security, API Penetration Testing, Burp Suite, OWASP, and Azure Security should be mandatory. AI/LLM security testing would be a valuable additional skill for CogniCor's Advisor Copilot products.

📌 Application Security Engineer (Kochi)
🏢 CogniCor | AI for Financial Advisors
📍 Kochi