Application Security Engineer / Penetration tester

Overview

Growe welcomes those who are excited to:• Triage, validate, and prioritize security findings from SAST, SCA, and Secret scanning tools, filter out false positives, assess risks, and track issues through to remediation; • Conduct manual and tool-assisted code reviews to identify security vulnerabilities, logic flaws, and insecure implementation choices before code reaches production; • Perform hand

What you'll do

• Growe welcomes those who are excited to:• Triage, validate, and prioritize security findings from SAST, SCA, and Secret scanning tools, filter out false positives, assess risks, and track issues through to remediation; • Conduct manual and tool-assisted code reviews to identify security vulnerabilities, logic flaws, and insecure implementation choices before code reaches production; • Perform hands-on penetration testing of web applications, microservices, and APIs to uncover security vulnerabilities and business logic flaws; • Audit REST and GraphQL APIs and web applications with a strong focus on core application security risks, authentication, authorization, and business logic.

Requirements

• Practical experience with Application-Security-Engineer, Penetration-Tester, Cybersecurity, API-Security.
• Relevant academic or project background for a Application Security Engineer / Penetration tester role.
• Strong written and verbal communication in English.
• Comfortable working remotely with distributed teams.

Skills