Application Security Engineer

About the role

Join n11's Technology/Infrastructure Department as an Application Security Engineer. You will protect the platform’s web and mobile applications by embedding security early in the development lifecycle and by actively hunting for vulnerabilities.

Key responsibilities

• Perform penetration testing and vulnerability assessments on web apps, cloud services, and infrastructure using manual and automated techniques.
• Collaborate with development, DevOps, QA, and product teams to integrate security controls into CI/CD pipelines and to remediate findings.
• Develop custom scripts and tools to automate security testing, attack‑surface analysis, and reporting.
• Manage vulnerability remediation, create risk‑based remediation plans, and track progress across teams.
• Leverage Web Application Firewalls (WAF) and other runtime protections to reduce exposure and monitor threats.

Required profile

• Bachelor’s degree in Computer Science, Cybersecurity or related field, or equivalent practical experience.
• 4+ years of experience in application security, penetration testing, or vulnerability research.
• Hands‑on experience with secure software development lifecycle (SSDLC) and shifting security left.
• Familiarity with OWASP standards, especially the OWASP Top 10.
• Relevant certifications (e.g., OSWE, GWAPT, OSCP) are a plus.

Required skills

• Programming/scripting: Java, Golang, Python, Bash.
• Application security tools: SAST, DAST, SCA, static and dynamic analysis platforms.
• Penetration testing techniques and vulnerability research.
• Web security concepts: authentication, session management, SSRF, SQL injection.
• Mobile security frameworks/tools: OWASP Mobile Top 10, MobSF, Frida.