Job Summary
We are seeking a hands-on Application Security Engineer with strong expertise in web, API, cloud, and AI security. The ideal candidate will own product security across multiple consumer products in Social, Dating, Health, Fintech, Astro, and AI, embedding practical security into architecture, development, and operations while protecting user data and credentials.
Key Responsibilities
- Create threat models, abuse cases, and security requirements for apps, APIs, and AI workflows.
- Define controls for authentication, OAuth/OIDC, secrets, encryption, RBAC, and tenant isolation.
- Review architecture and code for OWASP risks, SSRF, injection, and privilege escalation.
- Set up SAST, DAST, dependency, secret, and container scanning in CI/CD.
- Perform hands-on web, API, and cloud security testing.
- Review AI features for prompt injection, data leakage, and unsafe tool use.
- Build incident-response playbooks and lead investigation and remediation.
- Define privacy controls for data retention, deletion, and sensitive data handling.
- Train engineers, prioritise findings by real risk, and verify fixes before closure.
Preferred candidate
- 5-8 years in application, API, or cloud security.
- Strong knowledge of OWASP Top 10 and OWASP API Security.
- Hands-on experience securing OAuth/OIDC, tokens, secrets, and multi-tenant SaaS.
- AWS security across IAM, KMS, networking, logging, and Kubernetes.
- Threat modelling, secure code review, and practical penetration testing.
- Scripting in Python or Bash for security automation.
- Clear communication during incidents, with a risk-first mindset.
Good to have: Kubernetes security; LLM/AI security and red teaming; SOC 2 or ISO 27001; OSCP, CISSP, or CSSLP certification.
Why Join Us?
You will get the opportunity to work on multiple products across different industries rather than maintaining a single application.
Our product portfolio spans: Social | Dating | Health | Fintech | Astro | AI | Consumer Technology
One of our existing products is already serving 1.5M+ users, while several new products are currently being planned and developed.
If you are excited about building products from the ground up, solving challenging engineering problems, and creating some of the best consumer applications in the industry, this role could be a great prospect.
📌 Application Security Engineer (Noida)
🏢 Juuuno
📍 Noida