Application Security Engineer @ Mumbai

Position: Application Security Engineer Location: Navi Mumbai Duration: Contract to Hire Job Description: Conduct comprehensive application security assessments across Web, Mobile (Android & iOS), APIs, and Cloud environments Conduct comprehensive application security assessments across web, mobile (Android & iOS), APIs, and cloud environments Perform secure design reviews to identify architectural and design-level vulnerabilities early Execute in-depth API security testing, including authentication, authorization, and data validation checks Carry out external and internal penetration testing (ethical hacking / red team exercises) to simulate real-world attacks Identify, analyze, and document security vulnerabilities with clear risk ratings and business impact Prepare detailed security assessment reports with actionable remediation recommendations Provide remediation guidance and support, including validation of fixes and follow-up assessments Maintain solid understanding of application security fundamentals (OWASP Top 10, secure coding practices, threat modeling)