Application Security Engineer Job in Pune at Verto India Private Limited

VERTO is hiring for the role of Application Security Engineer!

Responsibilities of the Candidate:

• Conduct in-depth penetration testing for Web, API, and Mobile (iOS & Android) applications.
• Perform secure code reviews and provide actionable remediation guidance, especially for Node.js.
• Automate security testing and integrate tools into CI/CD pipelines.
• Writing scripts for automating mundane security tasks.
• Develop and implement security best practices (OWASP Top 10, SANS 25).
• Monitor and strengthen AWS cloud security configurations, including AWS auditing and AWS penetration testing .
• Collaborate with development teams for early-stage threat modeling and risk assessments.
• Create and maintain security playbooks for incident response.
• Stay ahead of emerging threats and introduce new security methodologies.

Requirements:

• Proven experience in penetration testing for Web, API, and Mobile (iOS & Android) applications.
• Strong expertise in security testing tools (e.g., Burp Suite, OWASP ZAP, Python scripting).
• Proficiency in scripting languages such as Python or other relevant languages (e.g., PowerShell, Bash)
• Hands-on experience in secure code reviews and remediation guidance.
• Solid understanding of OWASP Top 10, SANS 25, and other security frameworks.
• Experience integrating security tools into CI/CD pipelines.
• Cloud security expertise, particularly in AWS (IAM, security monitoring, infrastructure security, including AWS auditing and AWS penetration testing capabilities)
• Familiarity with Agile and DevOps methodologies with a security-first mindset.
• Experience with Node.js applications for code reviews and remediation.
• Relevant certifications (e.g., OSCP, CISSP, CEH, AWS Security Specialty, Certified DevSecOps Engineer).
• Experience working in a fast-paced startup environment.
• Experience working in a DevOps environment.
• Experience with Infrastructure as Code (IaC) tools (Terraform, Ansible)
• Experience with specific industry domains (e.g., Fintech, Logistics, E-commerce) where robust application security is critical.