Web & Mobile Application Security Engineer

About the Role

Athenian Tech is seeking a motivated and detail-oriented Web & Mobile Application Security Engineer with 1-2 years of hands-on experience. The ideal candidate will identify, assess, and mitigate security vulnerabilities across web and mobile applications, collaborating closely with development teams to embed security best practices throughout the software development lifecycle.

Key Responsibilities

• Conduct web application penetration testing based on OWASP Top 10 and SANS 25 frameworks
• Perform mobile application security assessments for Android and iOS platforms
• Execute static (SAST) and dynamic (DAST) application security testing
• Identify and validate vulnerabilities including SQLi, XSS, CSRF, IDOR, and API flaws
• Triage, document, and report security findings with risk ratings and remediation guidance
• Collaborate with development teams to verify patches and re-test vulnerabilities
• Maintain vulnerability tracking and reporting using standard tools
• Participate in threat modelling and security design reviews
• Review source code for security weaknesses and insecure coding patterns
• Provide secure coding guidance and training to development teams
• Use and maintain security testing tools such as Burp Suite, OWASP ZAP, MobSF, and Frida
• Assist in integrating security testing into CI/CD pipelines
• Contribute to building internal security scripts and automation utilities

Requirements & Qualifications

• 1-2 years of hands-on experience in web and mobile application security testing
• Proficiency in web application security testing and OWASP methodologies
• Familiarity with mobile security frameworks (Android/iOS) and tools like MobSF, Apktool, jadx
• Hands-on experience with Burp Suite, Nikto, SQLMap, Nmap, and Metasploit
• Understanding of HTTP/HTTPS protocols, REST APIs, and GraphQL security
• Knowledge of SSL/TLS and authentication mechanisms (OAuth, JWT, SAML)
• Basic scripting skills in Python, Bash, or JavaScript for automation
• B.Tech / B.Sc. in Computer Science, Information Technology, Cybersecurity, or related field, or equivalent practical experience

Preferred Skills & Nice to Have

• Certifications such as eJPT, CEH, CompTIA Security+, or OSCP (in progress or completed)
• GWAPT, GMOB, or other mobile security certifications
• Experience with cloud security environments (AWS, GCP, or Azure)
• Understanding of DevSecOps and CI/CD pipeline security integration
• Familiarity with container security (Docker, Kubernetes)
• Exposure to bug bounty programs or CTF competitions

Benefits & Perks

• 5-day working week with 1st & 3rd Saturdays off
• Flexible onboarding for immediate joiners or candidates with up to 15-day notice
• Exposure to diverse domains including fintech, healthcare, and e-commerce security
• Structured learning and career growth in cybersecurity
• Mentorship from senior security professionals