techolution
Website:
techolution.com
Job details:
Are you a cybersecurity trailblazer eager to fortify the future of AI? At Techolution, the world's leading Full Enterprise Automation specialist, we're seeking a dynamic Application Security Engineer to join our mission of delivering unparalleled AI ROI. You'll be instrumental in safeguarding our innovative solutions, conducting authorized penetration testing across web applications, APIs, cloud, and Kubernetes, and owning the entire vulnerability lifecycle from identification to remediation. This pivotal role involves embedding robust DevSecOps practices, ensuring critical vulnerabilities are blocked in pipelines, and collaborating directly with engineering teams to build secure-by-design systems that drive our clients' success.
Title : Application Security Engineer / White Hat Hacker
Location :Remote Work
Employment Type: Full-time
Exp Range : 3+ Years
Key Responsibilities:
- Perform hands-on application security assessments and penetration testing across web applications and APIs.
- Identify, exploit, validate, document, and communicate application vulnerabilities.
- Assess applications against the OWASP Top 10 and common API attack vectors.
- Analyze web and API attack surfaces and identify security weaknesses.
- Use Burp Suite and/or OWASP ZAP to intercept, manipulate, analyze, and test application/API traffic.
- Read and understand application source code to identify security flaws and support root-cause analysis.
- Assess Kubernetes/GKE environments for application and cloud-native security risks.
- Identify container vulnerabilities, cloud misconfigurations, excessive permissions, and potential attack paths.
- Assess IAM security, access controls, excessive privileges, and authorization weaknesses.
- Assess security risks in GitHub repositories and CI/CD pipelines, including exposed secrets, insecure practices, dependency risks, and repository weaknesses.
- Work with SAST, DAST, and SCA tools as part of the application security lifecycle.
- Validate the exploitability and business impact of identified vulnerabilities.
- Prioritize vulnerabilities based on business risk and potential impact, not only technical severity.
- Communicate security findings, business impact, and remediation recommendations clearly to engineering and business stakeholders.
- Work with development teams to drive remediation and perform security retesting to validate fixes.
Qualifications
- 3+ years of hands-on experience in Application Security, Ethical Hacking, or Penetration Testing.
- Strong understanding of OWASP Top 10, Web Application Security, and API Security.
- Practical experience using Burp Suite and/or OWASP ZAP for security testing.
- Ability to understand application code and investigate vulnerabilities at their root cause.
- Working knowledge of Kubernetes/GKE, IAM, GitHub, and CI/CD security.
- Familiarity with SAST, DAST, and SCA tools and their role in the software development lifecycle.
- Demonstrated evidence of finding and validating real-world vulnerabilities through penetration testing, bug bounty, security research, CVEs, labs, or production security projects.
- Strong ability to assess and communicate technical risk and business impact.
- Strong communication, ownership, curiosity, problem-solving, and execution skills.
- Security certifications such as OSCP, OSWE, CEH, GIAC, or CREST are a plus, but hands-on experience is more important.
Preferred Certifications:
About Techolution:
Techolution is the world’s leading FEA – Full Enterprise Automation specialist. We are trusted by boards and executive leaders who need AI with real business outcomes. Despite Gen AI, LLMs, and billions in investment, most enterprise AI programs aren't delivering results.
Techolution fixes that with BPA 4.0. We take the power of big Tech’s Generic AI and multiply it with our Expert AI stack — resulting in business process automations that follow the same nuances as domain experts do on the job at an unprecedented speed.
Our platform has delivered over $900M in AI ROI for our clients in less than a year, all while increasing their AI Adoption by 10x.
Our 3 power moves for ROI from AI:
1. Value Finder - We Identify high-impact AI and automation opportunities in enterprises and build solutions that deliver measurable value in as little as 30 days.
2. 100K Challenge: Work on fast-paced AI initiatives where teams build solutions designed to generate 2× ROI within 100 days.
3. GE LEAP: Contribute to enterprise AI transformation through our partnership with Google, helping scale Gemini-driven solutions across organizations.
Visit us @www.techolution.com : To know more about our revolutionary core practices and getting to know in detail about how we enrich the human experience with technology.
Click on Apply to know more.