Description:

The Senior Application Security Engineer will be part of a highly experienced Security Team at Crypto.com, which is dedicated to user security.
The team is composed of seasoned cybersecurity experts and has a strong focus on security, privacy, and compliance.
Responsibilities include discovering security vulnerabilities through design review, source code review, and penetration testing, either manually or using automated tools, and following up on the remediation process.
The engineer will participate in agile scrum meetings and provide professional recommendations on the design of security controls, libraries, and protocols.
Conducting security-related training sessions is also part of the role.
The position involves implementing various security control verification and risk detection through automated scripts.
The engineer will provide support on application-level security monitoring, intrusion detection, and incident response.

Requirements:

An OSCP certification (or equivalent, such as CREST) is a MUST.
A deep understanding of OWASP Top 10 and the ability to detect and address logic flaws are highly desirable.
A minimum of five years of experience in Web API testing and proficiency in using BurpSuite is preferred.
Experience with Mobile App testing, including comprehension of jailbreaking/rooting a device, API hooking, reverse engineering, and de-obfuscation is highly beneficial.
Previous working experience in a crypto trading platform would be highly advantageous.

The position offers a competitive salary and a medical insurance package with extended coverage for dependents.
Employees enjoy attractive annual leave entitlements, including birthday and work anniversary leave.
There is work flexibility with options for hybrid or remote setups and flexible work hours.
The company provides opportunities for career growth through an internal mobility program.
Employees receive a Crypto.com visa card upon joining and can learn more about the benefits packages from the talent acquisition team.