Conduct manual and automated penetration testing of web applications and APIs.
Identify and validate vulnerabilities aligned with OWASP Top 10 and API Security Top 10.
Perform threat modeling for new features and services.
Conduct secure code reviews (static analysis) and recommend remediation.
Validate findings from SAST, DAST, and dependency scanning tools.
Provide remediation guidance and conduct fix verification testing.

🎯 Requirements

6–9 years of experience in Application Security, Product Security, or Offensive Security.
Hands-on experience conducting web and API penetration testing.
Strong understanding of OWASP Top 10 and common attack vectors.
Experience using tools such as Burp Suite, OWASP ZAP, Nmap, Snyk, Checkmarks, etc.
Experience working with cloud platforms (AWS/Azure/GCP).
Familiarity with container security and modern DevOps environments.

Apply on employer's website

This employer gathers applications via their own applicant tracking system.

You will be redirected to an external application form.

Share job

Meet JobCopilot: Your Personal AI Job Hunter

Automatically Apply to Engineering Jobs. Just set your preferences and Job Copilot will do the rest — finding, filtering, and applying while you focus on what matters.

Activate JobCopilot