The Security team is responsible for securing our application platform, cloud infrastructure to protect platform and its customer database. As an Application Security Engineer, you will collaborate with other security and engineering teams on identifying vulnerabilities in our application while improving visibility and implementing application security best practices throughout SDLC

Your Key Responsibilities
Minimum 3 years of experience in Application security.
Perform security assessment of web applications, Android, iOS mobile applications
Good knowledge of security frameworks, secure coding practices, information security principles, Threat Modelling
Must have Knowledge of the most common implementations of the Threats in application security (e.g. XSS, SQL Injection, XSRF, buffer overruns,business logics, brute force, etc) and how they match the general classification
Familiarity with the tools for various security activities: Static Code Analysis, DAST Penetration Testing, Intrusion Detection/Prevention, etc
Proactively identify vulnerabilities across our platform and recommend fixes
Ownership of the tasks
Able to automate security activities




Adapt to technologies/languages/platforms/frameworks of the time
Promote the culture of security first at Pharmeasy
Identifying the problem statements which upon solving will increase the security posture of the platform/ App.

What To Bring
In-depth knowledge of security vulnerabilities not just limited to OWASP Top 10
Experience in doing security assessments on web applications, Android and iOS mobile applications in microservice architecture
Experience in using the security tools to carry out the manual as well as automated security assessments.
Experience working with common product flows like Authentication, payment gateway integration, Business logics etc.
Driving Security in SDLC
Good understanding of AWS and GCP Cloud Platform
Passion for security, and a practical and balanced approach to security issues.
Independent, self-motivated and comfortable working in a quick-paced setting

Certifications (Positive to have)
1. EC council - Certified Ethical Hacker (CEH)
1. Comptia security+
1. (ISC)2 Certified Information Systems Security Professional (CISSP)
1. Any other relevant

📌 Application Security Engineer Bengaluru
🏢 Thyrocare
📍 Bengaluru