Application Security Analyst

Application Security Engineer

Experience: 3-6 Years
Location: Navi Mumbai
Employment Type: Full-time (WFO)

Job Summary

We are looking for an Application Security Engineer with hands-on experience in security testing of Web, Mobile (Android/iOS), APIs, and Cloud environments.

Key Responsibilities

• Conduct VAPT and penetration testing of web applications, mobile apps, APIs, and cloud environments.
• Perform secure architecture/design reviews and threat modeling.
• Conduct API security testing covering authentication, authorization, data validation, and business logic.
• Identify, validate, and document vulnerabilities with risk ratings and business impact.
• Prepare security assessment reports with clear remediation recommendations.
• Work with development teams on remediation and retest fixes.
• Participate in ethical hacking/red team exercises as required.

Required Skills

• Strong knowledge of OWASP Top 10, API Security, secure coding, and threat modeling.
• Hands-on experience with tools such as Burp Suite, Nmap, Postman, etc.
• Understanding of Web, Mobile, API, and Cloud Security.
• Good vulnerability assessment, report writing, and communication skills.
• Scripting knowledge (Python/JavaScript) is an advantage.
• Security certifications such as OSCP, CEH, eJPT, or equivalent are a plus.

Key Skills: Application Security | VAPT | Penetration Testing | Web Security | API Security | Mobile Security | OWASP | Burp Suite | Cloud Security | Ethical Hacking