Job Description

Key Responsibilities:

Code Audit & Penetration Testing : Conduct security code reviews and penetration testing for Web applications, APIs, and Web3 infrastructure (Smart Contracts, DApps, Wallets).

SDL & DevSecOps : Drive the Security Development Lifecycle (SDL) by integrating SAST/DAST automation tools into CI/CD pipelines.

Incident Response : Handle application-level security incidents, conduct root-cause analysis, and track vulnerability remediation.

Security Architecture Review : Participate in product design reviews to identify architectural/logical flaws and provide security hardening solutions.

Requirements:

Core AppSec Skills : 2+ years of experience in AppSec or PenTesting; solid knowledge of OWASP Top 10 and web/API vulnerability exploitation.

Web3 / Blockchain Experience : Familiar with Web3 threat vectors (e.g., Reentrancy, Flash Loans, Signature Forgery, DApp attacks). Hands-on experience in Solidity auditing or DApp/Wallet testing is a strong plus.

Tooling & Automation : Proficient with security tools (e.g., Burp Suite, Slither, Mythril, Checkmarx) and capable of scripting in Python or Go for automation.

Communication : Excellent cross-functional communication skills to effectively drive remediation with development teams.

#J-18808-Ljbffr

Apply Now

Similar Opportunities

View all jobs

Name	Expiration	Description
ATTBCookie* ATTBUserID ATTB_LinkedUserID	2 years 400 days 1 year	These cookies are used to remember a user’s choice about cookies on thebigjobsite.com. Where users have previously indicated a preference, that user’s preference will be stored in these cookies.
ATTBTracking*	Session	These cookies are used by ATTB to understand user interaction with the website.
last-search search redirect-stage original-keyword	1 day Session 1 hour 1 hour	These cookies are used by thebigjobsite.com to pass search data between our own pages.
datadome	1 year	DataDome is a cybersecurity solution to detect bot activity
jja*	1 days	Used to track if you have seen the Job Alerts prompt and hold settings for your profile. Job Alerts is a service you can subscribe to to receive information about new jobs.

Name	Expiration	Description
_ga _gid _gat_gtag_* _ga_JH3TWMTYRK __gads	Typically ranges from session-based (24 hours) to longer-lasting cookies (up to 2 years).	Google Analytics Cookies: Used for tracking and analytics, these cookies collect information about website usage to help understand user behavior. Visitor tracking, session management, and ad performance analysis.
_gcl_au NID DV UULE, EUULE	Typically lasts from a few days to months.	Google Ads / AdSense Cookies: Cookies used for advertisement personalization, conversion tracking, and remarketing by Google Ads. Track ad clicks and impressions, personalize ad content, and measure conversions.
_uetsid _uetvid	Typically lasts from a few days to months.	Microsoft Advertising (Bing Ads): Microsoft's tracking cookies for advertising and user analytics. Track user sessions and unique visitors for remarketing campaigns.
SID SSID SAPISID, APISID SIDCC SOCS AEC	Typically lasts from a few days to months.	Google Account/Authentication Cookies: These cookies are set by Google services (e.g., Gmail, YouTube) to manage user sessions, preferences, and account security. Authentication, session security, and maintaining user preferences.
__secure*	Typically lasts from a few days to months.	Secure Cookies (Potentially Third-Party): Cookies prefixed with __secure* are often used for enhanced security in user sessions or tracking. These are typically first- or third-party cookies, depending on their origin.
MSPTC MUID SRCHD SRCHHPGUSR SRCHUID SRCHUSR USRLOC WLS _EDGE_S _EDGE_V _SS _U ANON	Typically lasts from a few days to months.	These cookies form part of an analytics service that connects data from Bing with actions performed on the website. These cookies allow Bing to serve relevant advertisements to visitors across the Microsoft Bing network
_clck _clsk CLID ANONCHK MR MUID SM	Typically lasts from a few days to months.	Microsoft Clarity: is a cutting-edge behavioral analytics tool that helps us understand user interaction with your website. By using Clarity, we can enhance the user experience.

OSL

Senior Application Security Engineer

Job Description

Similar Opportunities

Johnson Controls

Senior Application Engineer (Security)

Johnson Controls India

Senior Application Engineer (Security)

OSL