Description:

We are seeking a motivated and detail-oriented Application Security Engineer Level 1 to join our fintech company's security team.
As an AppSec Engineer L1, you will help identify, analyze, and mitigate security vulnerabilities in our applications.
You will work closely with product development teams to secure web, API, and mobile systems.
Engage in hands-on activities such as security reviews, basic scripting, automation, and vulnerability validation.
This individual contributor role is perfect for engineers who are starting their security career and are eager to deepen their technical and security expertise.
Contribute to the overall resilience of our applications.

Requirements:

Educational Background: A Bachelor’s degree in Computer Science, Engineering, Information Security, or equivalent practical experience is required.
Experience: 0–2 years of experience in application security, software engineering, or a related technical role is necessary.
Technical Skills:
- Understanding of OWASP Top 10 for Web, API, and Mobile; able to reason about vulnerabilities like IDOR, XSS, SQLi, SSRF, and JWT issues.
- Basic Python scripting for tasks like log parsing or simple API interaction is essential.
- Familiarity with secure coding principles and performing code reviews focused on identifying insecure patterns is required.
- Use of HTTP proxies (Burp Suite, Caido, ZAP) for manual request manipulation and fuzzing is necessary.
- Awareness of Android security testing tools (MobSF, Apktool, Jadx) is important.
- Familiarity with instrumentation frameworks like Frida for tasks such as SSL pinning bypass or API hooking is preferred but not required.
Soft Skills:
- An analytical thinker with strong attention to detail is essential.
- Effective communicator with the ability to explain technical issues clearly is required.
- Eager to learn and grow in the application security field is necessary.
- A strong work ethic and ownership mentality are important.
- Comfortable working in a fast-paced environment and collaborating across teams is required.

Opportunity to work in a dynamic fintech environment focused on application security.
Gain hands-on experience in identifying and mitigating security vulnerabilities.
Collaborate with cross-functional teams and contribute to the security of web, API, and mobile systems.
Continuous learning and improvement in the application security field.
Potential for career growth and development in a rapidly evolving industry.