Application Security Engineer

Responsibilities

• Triage, validate, and prioritize security findings from SAST, SCA, and Secret scanning tools
• Conduct manual and tool-assisted code reviews to identify security vulnerabilities and logic flaws
• Perform hands-on penetration testing of web applications, microservices, and APIs
• Audit REST and GraphQL APIs with a focus on authentication, authorization, and business logic

Requirements

• 3 years of experience in Application Security, Product Security, or Penetration Testing
• Hands-on experience with Semgrep, Gitleaks, Trivy, and OSV-Scanner
• Proficiency with Burp Suite, Nuclei, Subfinder, SQLmap, Metasploit, and NetExec
• Deep understanding of OWASP Top 10 and OWASP API Security Top 10
• Knowledge of identity protocols including OAuth 2.0, OIDC, JWT, SAML, and RBAC/ABAC
• Intermediate English proficiency

Preferred Qualifications

• Ability to read and analyze modern application code
• Basic understanding of AWS cloud security and Kubernetes (K8s) security fundamentals

Benefits

• Global Medical Coverage
• Health & Wellness Focus
• Benefits Programs for gym, dental, and psychological services
• Performance-Driven Rewards
• Growth Opportunities

About the Company

Growe is a leading business advisory and services group in iGaming and Entertainment, providing strategic vision and hands-on expertise to help businesses navigate the industry and achieve sustainable growth.