Application Security Engineer

Job not on LinkedIn

🔥 2 hours ago

🇮🇳 India – Remote

⏰ Full Time

🟢 Junior

🟡 Mid-level

💻 Application Engineer

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Greenlight Planet

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2009

⚡ Energy

🌍 Social Impact

👥 B2C

Energy • Social Impact • B2C

Greenlight Planet is a company that has transitioned to the brand Sun King. It specializes in designing, distributing, installing, and financing solar energy solutions, specifically for the 1. 8 billion people without reliable electricity access. The company provides a range of solar products, such as lanterns, home systems, and AC electricity systems, to meet diverse power needs across Africa and Asia. Sun King's solutions facilitate off-grid power access, offering reliable and sustainable energy alternatives to traditional power sources. The company operates on a global scale, including in regions such as East Africa, South Asia, and Oceania, and also provides pay-as-you-go financing options to make solar energy more accessible and affordable.

📋 Description

• Own application security responsibility for assigned business functions through threat modeling, architecture reviews, penetration testing, secure coding programs, and vulnerability management. • Perform manual penetration testing and vulnerability assessments on web applications, APIs, and Android mobile applications. • Perform security reviews for AI-native products, models, pipelines, and inference services. • Onboard applications into the SSDLC program and serve as a security point of contact for application products. • Own security incident response for product-layer issues, define remediation plans, and track fixes through closure. • Integrate and tune SAST, DAST, IAST, and SCA tools in CI/CD, create custom rules where needed, and triage false positives. • Review and harden cloud infrastructure, including Kubernetes RBAC, pod security, network policies, Istio service mesh, Keycloak/OIDC configurations, and IAM across AWS, DigitalOcean, GCP, and Firebase. • Communicate vulnerabilities and risks clearly to developers, product managers, and leadership in language that drives actionable results. • Conduct application security training for engineers and product managers.

🎯 Requirements

• Bachelor's degree in Computer Science, Cyber Security, or any related fields. • At least 2 years of hands-on application security experience, ideally in product-based or SaaS companies working directly with engineering teams. • Good understanding of OWASP Top 10, API Security Top 10, and common authorization flaws including BOLA, BFLA, and privilege escalation. • Experience in manually testing web apps, APIs, and Android apps, including manual code reviews beyond just running tools. • Familiarity with OAuth2, OIDC, JWT, and typical misconfigurations in providers such as Keycloak and Firebase. • Experience integrating and tuning SAST/DAST and optionally SCA/IAST tools within CI/CD pipelines. • Exposure to cloud-native security: Kubernetes, containers, service mesh, Istio mTLS and policies, and IAM concepts across at least one major cloud provider. • Familiarity with AI/LLM security risks, such as OWASP LLM Top 10. • Practical experience implementing guardrails, prompt validation, output filtering, or other safety controls in production AI features, or assessing insecure use of third-party AI APIs. • Ability to script/automate using tools such as Python or Bash to streamline testing, data collection, and reporting. • Interest in or experience with building AI-based security tools that improve coverage or reduce manual toil. • Experience with Cloudflare WAF, perimeter security scanning, and/or red-team testing is a plus.

🏖️ Benefits

• Professional growth in a dynamic, rapidly expanding, high-social-impact industry • An open-minded, collaborative culture made up of enthusiastic colleagues who are driven by the challenge of innovation towards profound impact on people and the planet. • A truly multicultural experience: you will have the chance to work with and learn from people from different geographies, nationalities, and backgrounds. • Structured, tailored learning and development programs that help you become a better leader, manager, and professional through the Sun King Center for Leadership.