Role -Application Security Engineer
Experience - 4-7 yrs
Location - Bangalore

Key Responsibilities
Internal VAPT & Security Testing
Execute internal VAPT on web applications, APIs, and React Native mobile applications, focusing on real-world attack paths.
Perform authenticated and authorization-focused testing, including BOLA/IDOR, broken access control, and session abuse.
Validate scanner results and provide reproducible evidence such as PoCs, request/response traces, and impact narratives. DAST Program Support
Improve DAST scanning reliability and signal quality by managing scope definition, scan profiles, and false positives.
Produce verified, developer-actionable outputs for the monthly DAST cadence.
Maintain stable test credentials and safe scanning practices for Tier-0/Tier-1 applications in coordination with the DAST owner.

Secure SDLC & DevSecOps Enablement
Support security checks integrated into GitHub Actions, including secrets ...