Application Security Engineer

At Techolution, we build enterprise AI-powered solutions that automate complex business processes and deliver measurable business outcomes. As our AI capabilities expand, securing applications, APIs, and intelligent AI-agent workflows is critical.

We are looking for a hands-on Application Security Engineer who thinks like an attacker, investigates vulnerabilities beyond automated scan results, and works directly with engineering teams to make products secure.

You will assess real-world attack paths across web applications, APIs, cloud environments, and AI-powered systems, taking ownership of security findings from discovery through remediation and retesting.

Title : Application Security Engineer

Location :Remote Work

Employment Type: Full-time

Exp Range : 2+ Years

Key Responsibilities:

• Application Security: Conduct hands-on penetration testing of web applications and APIs. Identify, exploit, and validate vulnerabilities involving access control, authentication, injection, business logic, and OWASP Top 10 risks.
• AI & Agent Security: Assess LLM applications, RAG systems, and AI-agent workflows for prompt injection, data leakage, authorization bypasses, excessive permissions, and unsafe tool execution.
• Exploit Validation & Root-Cause Analysis: Use Burp Suite or OWASP ZAP, HTTP traffic analysis, and source-code review to investigate vulnerabilities, demonstrate impact, and identify underlying causes.
• Cloud & Infrastructure Security: Identify security weaknesses involving IAM, cloud configurations, containers, Kubernetes/GKE, repositories, and CI/CD pipelines.
• Vulnerability Ownership: Prioritize findings based on exploitability, exposure, and business impact. Work with engineering teams to drive remediation, retest fixes, and verify closure.
• Security Engineering: Improve security assessment workflows and help integrate practical security controls into the software development lifecycle.

Qualifications

• Hands-on experience in Application Security, Ethical Hacking, or Penetration Testing .
• Strong understanding of OWASP Top 10, Web Application Security, and API Security .
• Practical experience using Burp Suite and/or OWASP ZAP for security testing.
• Ability to understand application code and investigate vulnerabilities at their root cause.
• Working knowledge of Kubernetes/GKE, IAM, GitHub, and CI/CD security .
• Familiarity with SAST, DAST, and SCA tools and their role in the software development lifecycle.
• Demonstrated evidence of finding and validating real-world vulnerabilities through penetration testing, bug bounty, security research, CVEs, labs, or production security projects .
• Strong ability to assess and communicate technical risk and business impact .
• Strong communication, ownership, curiosity, problem-solving, and execution skills.
• Security certifications such as OSCP, OSWE, CEH, GIAC, or CREST are a plus, but hands-on experience is more important.

Preferred Certifications:

• OSCP
• OSWE
• CEH
• GIAC
• CREST

About Techolution: Techolution is the world’s leading FEA – Full Enterprise Automation specialist. We are trusted by boards and executive leaders who need AI with real business outcomes. Despite Gen AI, LLMs, and billions in investment, most enterprise AI programs aren't delivering results.

Techolution fixes that with BPA 4.0. We take the power of big Tech’s Generic AI and multiply it with our Expert AI stack — resulting in business process automations that follow the same nuances as domain experts do on the job at an unprecedented speed.

Our platform has delivered over $900M in AI ROI for our clients in less than a year, all while increasing their AI Adoption by 10x.

Our 3 power moves for ROI from AI:

1. Value Finder - We Identify high-impact AI and automation opportunities in enterprises and build solutions that deliver measurable value in as little as 30 days.

2. 100K Challenge: Work on fast-paced AI initiatives where teams build solutions designed to generate 2× ROI within 100 days.

3. GE LEAP: Contribute to enterprise AI transformation through our partnership with Google , helping scale Gemini-driven solutions across organizations.

Visit us @www.techolution.com : To know more about our revolutionary core practices and getting to know in detail about how we enrich the human experience with technology.