Senior Application Security Engineer (KE)

JOB SUMMARY

Required SkillsetsTechnical Skills5+ years of penetration testing experienceDeep knowledge of:OWASP Top 10 (Web, API)Business Logic ExploitationAuthentication and session management flowsSSRF, RCE, injection flawsExperience with AI assisted penetration testing toolsUnderstanding of LLM-based attacks, prompt injection risks, AI model abuse vectorsExperience with tools such as:Burp Suite (Advance Usage)NmapNessusMetasploitSAT/DAST toolsMobile testing tools (MobSF, Frida, Objection)

RESPONSIBILITIES

Advanced Penetration TestingConduct manual and automated penetration testing across:Web applicationsAPI (REST, GraphQL, SOAP)Mobile applications (iOS & Android)Cloud-native workloads and containerized environmentInfrastructurePerform black-box and white box testingPerform business logic testingValidate and exploit findings to demonstrate real business riskConduct threat modeling and attack surface analysis AI & Autonomous PentestingDesign, operate and optimize AI-Driven autonomous pentesting platformsTune LLM-Based testing agents and attack orchestration workflowsValidate AI generated findings and reduce false positivesReporting & LeadershipProduce executive level reporting and technical reportsPresent findings to business, engineering and executive stakeholdersProvide remediation guidance with practical implementation adviceMentor junior testersContribute to internal security standards and processes

REQUIRED SKILLS

User experience (UX and UI) design, Security operations, Programming, Risk management

REQUIRED EDUCATION

Bachelor's degree