Security Engineer

Role Overview:

 

We are looking for a Security Engineer with strong experience in web application security, vulnerability assessment, and penetration testing. The role focuses on securing applications, identifying risks, and ensuring compliance across the development lifecycle.

 

Key Responsibilities: 

Identify and assess security risks in web applications
Perform vulnerability scanning and penetration testing
Work on OWASP vulnerabilities (XSS, CSRF, SQL Injection)
Collaborate with developers, QA, and security teams
Handle security compliance tickets and remediation
Use tools like Burp Suite, OWASP ZAP, WebInspect
Support container security (Docker, Kubernetes)
Work with AWS-based environments
Automate tasks using Python / Java / Bash
Promote secure coding and best practices

 

Required Skills:

4+ years in Security Engineering (3+ in Web App Security)
Strong knowledge of OWASP Top 10
Experience with penetration testing tools (Burp, ZAP, WebInspect)
Hands-on with Kubernetes, Docker
Scripting: Python / Java / Bash
Basic AWS experience
Strong communication skills

 

 Nice to Have:

DevSecOps experience
Security certifications (CEH, CISSP, etc.)