Application Security Engineer – Bangalore

About the role

We are looking for an Application Security Engineer to identify, validate, and track vulnerabilities across web, APIs, mobile, and backend systems. You will perform security testing, analyse changes for risk, coordinate fixes with developers, and help improve secure development practices.

Key responsibilities

• Test web applications, REST/GraphQL APIs, mobile apps (Android/iOS), backend services and databases for security issues.
• Identify common vulnerabilities such as SQL injection, XSS, CSRF, broken authentication/authorization and business‑logic flaws.
• Assess SSL/TLS configurations and flag weak ciphers, protocols or misconfigurations.
• Assist with basic cloud security reviews on AWS, Azure or GCP, covering IAM, storage and API gateways.
• Document vulnerabilities with reproducible steps, validate developer fixes and track remediation.
• Review new features and code changes for security impact before release.

Required profile

• 3‑6 years of experience in application security testing.
• Strong knowledge of OWASP Top 10, API security fundamentals and HTTP/HTTPS protocols.
• Understanding of authentication concepts such as OAuth, JWT and session management.
• Experience with security tools like Burp Suite, OWASP ZAP, SQLMap, Postman and basic Nmap.
• Familiarity with cloud platforms (AWS, Azure, GCP) and DevSecOps tooling.
• Bachelor’s degree in Computer Science, Cybersecurity or related field; certifications such as CEH, eJPT or Security+ are a plus.
• Exposure to Banking or FinTech environments is preferred.

Required skills

• OWASP Top 10
• API security fundamentals
• HTTP/HTTPS
• Burp Suite
• OWASP ZAP
• SQLMap
• Postman
• Nmap (basic)
• OAuth
• JWT
• Python scripting
• Bash scripting
• AWS
• Azure
• GCP
• DevSecOps tools

What we offer

• Technology‑first culture focused on secure, reliable digital banking.
• Hands‑on exposure to modern stacks, tools and cloud services.
• Collaboration with product, engineering and platform teams.
• Meaningful work that improves customer trust and product resilience.