Senior Application Security Engineer Jobs

Job Overview

SwipBox is seeking a qualified, proactive, and dynamic professional for the position of Senior Application Security Engineer.

Job Reference: JJ-00725

Job Details

Role and Responsibilities

• Perform penetration testing and vulnerability assessments across web, mobile, API, network, embedded software, firmware, and cloud environments.
• Conduct security testing of AWS infrastructure, including IAM, EC2, S3, Lambda, API Gateway, VPC, CloudFront, Cognito, and related services.
• Strong hands-on experience with web, API, mobile, cloud, network, and application security testing.
• Perform threat modeling, attack-surface analysis, and security architecture reviews to identify security risks and design-level weaknesses.
• Perform ethical hacking and red-team activities to simulate real-world attacks and assess security posture.
• Identify vulnerabilities, security misconfigurations, authentication and authorization weaknesses, business-logic vulnerabilities, abuse cases, and potential attack paths.
• Conduct API security testing, including REST APIs and authentication mechanisms.
• Review application source code to identify security vulnerabilities and insecure coding practices.
• Perform business-logic testing to identify vulnerabilities that may not be detected through automated security tools.
• Conduct firmware and embedded security testing, including reverse engineering, firmware extraction, static and dynamic analysis, and tampering analysis.
• Perform BLE security and protocol testing and identify vulnerabilities in embedded communication protocols.
• Work closely with developers and DevOps teams to understand and remediate security findings.
• Integrate security testing and controls into CI/CD pipelines, including SAST, DAST, SCA, IaC, and container security scanning.
• Apply secure software development and DevSecOps practices throughout the Software Development Lifecycle (SDLC).
• Validate security fixes through retesting and provide clear technical recommendations.
• Prepare detailed penetration testing reports covering vulnerabilities, risk ratings, evidence, impact, and remediation recommendations.
• Support security assessments during the design and development lifecycle.
• Stay current with emerging vulnerabilities, attack techniques, OWASP standards, and cloud security best practices.
• Independently plan, execute, document, and present penetration testing activities and security findings.
• Lead penetration-testing engagements and provide technical guidance to junior team members.
• Mentor junior team members and review security findings and penetration testing reports.
• Present security risks, findings, and recommendations to technical and management stakeholders.
• Collaborate with development and engineering teams to identify, communicate, and remediate security vulnerabilities.

Qualifications and Education Requirements

• Master’s or Bachelor’s degree in Software Engineering, Computer Engineering, Telecommunication Engineering, or Computer Science.
• 7+ years of professional experience.
• CEH, eCPPT, CRTP, OSCP, or any recognized security vendor certification would be preferred.

Preferred Skills

• Real-time traffic analysis, network IDS, and packet dissection.
• Strong understanding of information security and applied cryptographic protocols.
• Good knowledge of security technologies for secure software development, including cryptography, authentication techniques, and protocols.
• Good understanding of tools and technologies used for penetration testing.
• Experience with advanced vulnerability research and exploit development.
• Experience developing scripts or custom tools to support penetration testing and security assessments.

Key Responsibilities

Perform comprehensive penetration testing and vulnerability assessments across web, mobile, cloud, and embedded environments. Collaborate with development and DevOps teams to integrate security controls into CI/CD pipelines and remediate identified vulnerabilities.

Requirements and Skills

Requires a Bachelor's or Master's degree in a relevant engineering or computer science field with at least 7 years of professional experience. Candidates should possess strong technical skills in security testing and hold relevant industry certifications such as OSCP or CEH.

Key Competencies: Penetration testing, Vulnerability assessment, AWS security, Threat modeling, Ethical hacking, API security, Source code review, Firmware security, Reverse engineering, DevSecOps, CI/CD integration, SAST, DAST, SCA, Cryptography, Network security, AWS, IAM, Red Teaming, CI/CD

Interested candidates who meet the above criteria can apply directly online through the link below:

Apply Link: Apply for Senior Application Security Engineer at SwipBox

Deadline to Apply: 2026-10-21