Application Security Engineer

<p data-pm-slice="0 0 []"><strong>Atomicwork</strong> is on a mission to transform the digital workplace experience by uniting people, processes, and platforms through AI automation. Our team is building a modern service management platform that enables growing businesses to reduce operational complexity and drive business success.</p> <p>This is a <strong>hybrid position</strong> based out of our <strong>Bengaluru office</strong>. We offer competitive pay to employees and practical benefits for their whole family. If this sounds interesting to you, read on.</p> <h3><strong>What we’re looking for (qualifications)</strong></h3> <ul> <li> <p>Familiarity and ability to explain common security flaws and ways to address them (e.g. OWASP Top 10)</p> </li> <li> <p>Experience identifying security issues through code review.</p> </li> <li> <p>Proficient in at least one of the CI/CD products - Github actions, ArgoCD, Jenkins</p> </li> <li> <p>Proficient in Java or Python</p> </li> <li> <p>Familiarity with some common security libraries and tools (e.g. static analysis tools, proxying / penetration testing tools).</p> </li> <li> <p>Good understanding of network and web related protocols - TCP, TLS, HTTPS, DNS</p> </li> <li> <p>Ability to work effectively in a fast-paced environment.</p> </li> <li> <p>Good knowledge in multiple classes of vulnerabilities that includes cross-site scripting, SQL Injection, CSRF, cryptographic related weakness, and code injection.</p> </li> </ul> <p>Nice to have:</p> <ul> <li> <p>Proficient in Kubernetes, AWS & Linux.</p> </li> <li> <p>Good understanding if REST architecture framework & SQL & non-SQL databases</p> </li> </ul> <h3><strong>What you’ll do (responsibilities)</strong></h3> <ul> <li> <p>Developing and improving our tools and processes designed for discovering and aggregating security vulnerabilities</p> </li> <li> <p>Perform manual & automated assessment of various Atomicwork applications.</p> </li> <li> <p>Building repeatable and automated security test suites</p> </li> <li> <p>Perform security-focused code reviews</p> </li> <li> <p>Analysing system services, spotting issues in code, networks and applications</p> </li> <li> <p>Integration and automation of SAST in the DevOps pipeline.</p> </li> <li> <p>Support the bug bounty program.</p> </li> </ul> <h3><strong>What we offer (benefits)</strong></h3> <p>We are big on benefits that make sense to you and your family.</p> <ol> <li> <p><strong>Fantastic team</strong> —the #1 reason why everybody joins us. <strong>‍</strong></p> </li> <li> <p><strong>Convenient offices </strong>— well-located offices spread over five different cities.<strong>‍</strong></p> </li> <li> <p><strong>Flexible work timings</strong> — you get to decide how you want to work.</p> </li> <li> <p><strong>Paid time off</strong> — Unlimited sick leaves and 24 days off every year.</p> </li> <li> <p><strong>Health insurance</strong> — comprehensive health coverage for your entire family.<strong>‍</strong></p> </li> <li> <p><strong>Great hardware </strong>— premium Apple hardware to help