Role -Application Security Engineer
Experience - 4-7 yrs
Location - Bangalore

Key Responsibilities
Internal VAPT & Security Testing
● Execute internal VAPT on web applications, APIs, and React Native mobile applications, focusing on real-world attack paths.
● Perform authenticated and authorization-focused testing, including BOLA/IDOR, broken access control, and session abuse.
● Validate scanner results and provide reproducible evidence such as PoCs, request/response traces, and impact narratives. DAST Program Support
● Improve DAST scanning reliability and signal quality by managing scope definition, scan profiles, and false positives.
● Produce verified, developer-actionable outputs for the monthly DAST cadence.
● Maintain stable test credentials and safe scanning practices for Tier-0/Tier-1 applications in coordination with the DAST owner.

Secure SDLC & DevSecOps Enablement
● Support security checks integrated into GitHub Actions, incl...