🎁 Before you apply, rehearse this interview. Create your free WorkMundi account and get an Interview Training on HelpsYouSpeak — no cost, no card. I want my training →
Work Mode- Hybrid 2 Days OnSite Company- Algotale ( Incred Financial Services Limited ) Position- Product Support Security Engineer Location- Bangalore Job Description: We are seeking an Application Security Engineer to perform vulnerability assessments and penetration testing on web integrations, web application and mobile applications. Responsibilities include identifying security vulnerabilities, conducting secure code reviews, and ensuring compliance with OWASP, NIST, and ISO 27001 standards. The role requires expertise in manual and automated security testing using tools like Burp Suite, Metasploit, and Kali Linux. Key Responsibilities: Vulnerability Assessment & Penetration Testing: Perform regular internal and external VAPT on infrastructure, web applications, APIs, mobile applications, and cloud environments. Identify, triage, exploit security vulnerabilities through static and dynamic application security testing (SAST/DAST) and report vulnerabilities with detailed proof-of-concept (PoC) documentation. Use both automated and manual testing methodologies to uncover security weaknesses. Perform security-focused code reviews. Threat Analysis & Risk Assessment: Conduct in-depth risk assessments of identified vulnerabilities. Collaborate with teams to prioritize and remediate security issues. Develop and maintain a vulnerability management program. Tooling & Automation: Utilize open-source and commercial VAPT tools such as Burp Suite, Nessus, Nmap, Metasploit, OWASP ZAP, and others. Create and enhance custom scripts or tools to automate testing processes. Stay updated on the latest vulnerabilities, exploits, and security trends. Reporting & Documentation: Prepare detailed VAPT reports with risk ratings, impact analysis, and remediation recommendations. Communicate findings to technical and non-technical stakeholders. Ensure compliance with industry standards (e.g., OWASP, CIS, NIST) and regulatory requirements. Collaboration & Continuous Improvement: Work closely with DevOps, IT, and engineering teams to address security gaps. Assist teams in reproducing, triaging and addressing application security vulnerabilities. Work closely with developers to integrate security into the software development lifecycle, providing guidance on secure coding practices. Contribute to security awareness programs by sharing insights from VAPT exercises. Support red team/blue team exercises, if applicable. Required Skills: Strong hands-on experience with VAPT tools (e.g., Nessus, OpenVAS, Qualys, Burp Suite, Metasploit, Nmap, etc.). Proficiency in identifying and exploiting vulnerabilities (SQLi, XSS, RCE, SSRF, IDOR, etc.). Ability to perform threat modeling to identify potential security threats and design effective countermeasures. Knowledge of secure coding practices and SDLC integration. Experience with cloud security testing (AWS, Azure, GCP). Familiarity with scripting languages (Python, Bash, PowerShell) for automation. Understanding of common security frameworks (OWASP, MITRE ATT&CK, NIST). Strong analytical and problem-solving skills. Having experience in the security domain for 1-3 years. Preferred Qualifications: Certifications: OSCP, CEH, GPEN, eCPPT, or equivalent. Experience with container and Kubernetes security testing. Knowledge of WAF bypass techniques and post-exploitation tactics. Experience with CI/CD pipeline security testing .
Here's how to pick the right one and stand out in your application.
144.883Jobs
31.687IN
81%EN
That number is real. WorkMundi's database shows 144,883 open engineer roles across the world. India has the most with 31,687 jobs, followed by the United States with 30,084. If you just finished reading one job ad and felt paralyzed by choice, you're not alone—but this scale is actually an advantage. It means you can afford to be selective.
Start by geography and language. The majority of engineer ads—117,837 of them—have the job posting text written in English. Use that as one filter, but remember: the ad text language tells you nothing about whether the role actually requires you to speak English day-to-day. Read the job description carefully. Then check which countries have the volume you're targeting. Singapore, Poland, and Australia round out the top five after India and the US.
Next, learn who's hiring. Accenture has posted 2,801 engineer roles. andurilindustries, speechify, and jobgether are also actively recruiting. If you're applying to one of these names, research their hiring patterns and interview style before you apply. That homework pays off.
When you interview, expect the question every engineer hears: 'Tell me about a time you had to debug a problem that wasn't in your job description.' Have a specific story ready—not a general one. Name the tools, the deadline pressure, and what you learned. Hiring managers listen for whether you see problem-solving as part of the role itself, not a favour.