•  Salary Range: (₹15 Lacs to ₹30 Lacs)

    •  Extras: Bonuses + Health insurance + Professional Development Budget

Application security engineers to take on the application security projects entrusted to us by our clients. We have well-defined skill levels (L1 through L4) for which we recruit candidates and also use those skill levels to create career progression paths for the engineers. Please carefully review the levels below and specify the level which best describes your current skills on the next page.

L1 engineers will be expected to use our standardized web-application test plan to provide depth and breadth coverage on client web-applications and API services where they are generally paired with more experienced engineers on projects. They are also expected to start learning how to write good reports for basic security issues. They are expected to graduate to the next level within 12 months of starting this role.

L2 engineers should first meet the requirements for an L1 engineer and also be capable of performing Basic Network Scans , AWS Cloud Configuration reviews, basic Android app testing, and should be able to write quality reports for all types of issues as well as final reports for clients. They should also have any one of these additional skills:

    •  Basic iOS Testing

    •  GCP Cloud Config Review

    •  Azure Cloud Config Review.

L2 engineers will also be expected to contribute to internal skills improvement programs and knowledge sharing sessions. They are also expected to attend report read-out calls to gain experience in client expectations. They are expected to graduate to the next level within 12 months of starting the role which requires completing an OSCP (or approved equivalent) certification.

L3 engineers should have min 2 years of professional experience and be capable of performing advanced testing on both Android and iOS projects. They should also be capable of performing Advanced Network Assessments and basic testing of Thick-Client applications. In addition to writing reports, they will also be expected to peer reviews reports from other engineers as well as help junior engineers with their reporting.

L3 engineers are expected to actively participate in report read-out calls with clients and they are expected to graduate to the next role within 2 years of starting this role.

L4 engineers are expected to lead teams during web and mobile application projects and should be capable of fully assessing all web, mobile, and thick-client applications. They should also be capable of performing full network assessments, cloud configuration reviews, containers configuration review and also be able to review source code in two widely used languages. They are required to have completed certifications for GCP, AWS, and Azure cloud Platforms.

L4 Engineers are expected to lead kick-off calls with clients as well as lead final report read-out calls and act as the trusted advisor for the client. They are expected to graduate to the next role within 24 months of starting this role.