Role -Application Security Engineer

Experience - 4-7 yrs

Location - Bangalore

Key Responsibilities

Internal VAPT & Security Testing

● Execute internal VAPT on web applications, APIs, and React Native mobile applications, focusing on real-world attack paths.

● Perform authenticated and authorization-focused testing, including BOLA/IDOR, broken access control, and session abuse.

● Validate scanner results and provide reproducible evidence such as PoCs, request/response traces, and impact narratives. DAST Program Support

● Improve DAST scanning reliability and signal quality by managing scope definition, scan profiles, and false positives.

● Produce verified, developer-actionable outputs for the monthly DAST cadence.

● Maintain stable test credentials and safe scanning practices for Tier-0/Tier-1 applications in coordination with the DAST owner.