Accion Labs - Lead Application Security Engineer (7-12 yrs)

We are seeking a Lead Application Security Engineer to ensure the security of web and API- based applications for a large financial organization.

The role involves :

- Addressing OWASP Top 10 vulnerabilities.

- Defining guidelines for secure Web and REST API applications.

- Implementing proactive steps to avoid vulnerabilities before build/deployment.

- Conducting reactive testing in QA/UAT to identify vulnerabilities.

- Mitigating common security risks and attacks.

- Implementing Content Security Policy (CSP) and CORS.

- Overseeing data encryption and hashing practices.

- Using modern security tools for vulnerability scanning (Static and Dynamic) and threat detection.

Required: Strong experience in application security and risk management

Key Responsibilities :

- Scheduling and attending application walkthroughs with various teams to gain insights into the scope for each release within the agile methodology.

- Ensuring the quality of team members' work and conducting essential reviews prior to the final report submission.

- Conducting manual test case execution and analysing false positives in reports generated by automated scanners to identify defects.

- Drafting technical reports that provide a comprehensive description, propose mitigation strategies, and outline steps to replicate security issues from an attacker's viewpoint.

- Performing re- tests and tracking the defects until closure.

Required : 8+ years of Strong experience in application security and risk management