Application Security Engineer
Sun King (company site, opens in a new tab)2+ yrsRemoteDirect career pageEst. 8–18 LPA
Posted on 8 Sept
Reach people at Sun King
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at Sun King you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Own application security for assigned business functions, including threat modeling, architecture review, penetration testing, and vulnerability management.
- Perform manual penetration testing and security assessments for web applications, APIs, Android apps, and AI-native products.
- Manage security incident response, integrate and tune security tools in CI/CD pipelines, and harden cloud infrastructure configurations across multiple cloud providers.
Minimum Requirements
- Bachelor's degree in Computer Science, Cyber Security, or related field.
- At least 2 years of hands-on application security experience in product-based or SaaS environments.
- Experience performing manual penetration testing on web, API, and Android applications, and integrating SAST/DAST tools into CI/CD.
- Familiarity with cloud-native security concepts, specifically Kubernetes, service mesh, and IAM on major cloud platforms.
Ideal Candidate Profile
- Experienced in proactive application security ownership spanning development to production environments for SaaS or product companies.
- Skilled in both manual and automated security testing with knowledge of OWASP Top 10, API Security, OAuth2/OIDC, and common auth flaws.
- Comfortable working with cloud-native infrastructure security, AI/LLM security considerations, and integrating security tools and automation in CI/CD pipelines.