Application Security Engineer

About the Role

Strivo Labs is seeking a skilled Application Security Engineer to strengthen the security of our applications, platforms, APIs, and development processes. This is an exciting opportunity for a technically proficient security professional to embed security throughout the software development lifecycle, identify vulnerabilities, and prevent risks before production.

• Integrate automated security checks, SAST, DAST, and SCA tools into CI/CD pipelines.
• Conduct application security reviews, penetration testing, and code reviews across web, mobile, and APIs.
• Identify and remediate vulnerabilities including SQL injection, XSS, and broken authentication.
• Collaborate with engineering teams to design secure application architecture and enforce OWASP standards.
• Support compliance frameworks including ISO 27001, SOC 2, and data protection regulations.

• 4 to 7+ years of experience in Application Security, Product Security, or DevSecOps.
• Strong knowledge of OWASP Top 10, API security, and modern web architectures.
• Familiarity with Node.js, Python, or JavaScript/TypeScript.
• Experience with cloud security, Docker, Kubernetes, and CI/CD pipelines.
• Relevant certifications such as OSCP, OSWE, GWAPT, or CSSLP are a plus.

• Work on diverse digital products and scalable technology solutions.
• Collaborate with a growing multidisciplinary engineering team.
• Influence security architecture and engineering standards.
• Grow within an ambitious technology and digital execution company.

Skills