۴ ساعت پیش

استخدام Senior Application Security Engineer در شرکت ازکی

ازکی

تهران

۴ ساعت پیش اطلاعات تماس

حضوری

مقطع تحصیلی اعلام نشده

سابقه دارد (۲ سال)

حقوق توافقی

آقا و خانم

تمام وقت

مشاهده اطلاعات تماس

اطلاعات بیشتر

امروز

شرکت ازکی در تهران جهت تکمیل کادر خود از واجدین شرایط زیر دعوت به همکاری می‌نماید:

Description

job title

Gender: Any
Required Experience Year: 2 year
Working days: Saturday–Wednesday
Job Description
We are looking for a Senior Application Security Engineer to design, build, and own secure software delivery across our engineering organization.
Key Responsibilities:
Application Security
Design, implement, and operate pipelines across GitLab CI/CD.
Integrate and tune SAST, SCA, DAST, secret detection, IaC scanning, and container image scanning.
Generate and manage SBOMs; operate OWASP Dependency-Track as the central component inventory.
Operate Semgrep and SonarQube for code quality and security hotspot triage.
Perform manual source-code security reviews on Java and Laravel/PHP applications.
dentify injection, access-control, deserialization, SSRF, file-upload, cryptographic, and business-logic weaknesses.
Correlate source-code review findings with penetration test results to confirm exploitability and root cause.
Validate scanner findings, eliminate false positives, and translate results into actionable developer guidance.
Web & API Penetration Testing:
Test against OWASP Top 10, OWASP API Security Top 10, and the OWASP Web Security Testing Guide (WSTG) as a baseline methodology.
Exploit and demonstrate impact for authentication and session flaws, broken access control (IDOR, horizontal/vertical privilege escalation), SSRF, injection (SQLi, NoSQLi, template, command), file-upload, and request-smuggling issues.
Review and test authentication/authorization stacks: OAuth 2.0, OIDC, SAML, JWT handling, and SSO integrations. Chain findings into realistic attack paths and produce proof-of-concept exploits that show real business impact rather than raw findings.
Leverage industry-standard tooling (Burp Suite Pro, ffuf, nuclei, sqlmap)

Senior Application Security Engineer

متقاضیان واجد شرایط می توانند با کلیک روی لینک تکمیل فرم استخدام، رزومه خود را ارسال نمایند.

اطلاعات تماس

گزارش مشکل آگهی