Application Security Engineer
test Verified: test.io
- Remote (anywhere)
- Full-time
- Engineering
- Posted 20 October 2026
About the role
We are hiring an Application Security Engineer to help us build and ship software that is secure by design. You will work closely with engineering teams to find, fix and prevent security issues across our applications, and you will help shape how we think about security day to day.
What you'll do
- Review application code and architecture for security weaknesses and work with engineers to remediate them.
- Run security assessments and support penetration testing of our applications and APIs.
- Triage findings from scanners and external reports, and track them through to resolution.
- Partner with developers to embed secure coding practices into the software development lifecycle.
- Build and improve tooling that makes secure development easier for engineering teams.
- Help respond to and investigate application security incidents.
- Document risks clearly and communicate them to technical and non-technical stakeholders.
What you need
- Hands-on experience in application security or a closely related security engineering role.
- A solid understanding of common web application vulnerabilities and how to fix them.
- Experience reviewing code and working directly with software engineers.
- Familiarity with security testing tools and techniques.
- Clear written and verbal communication skills.
Nice to have
- Experience with cloud security.
- Relevant security certifications.
- Experience building security automation into CI/CD pipelines.
About test
This role is with test, based in India.
Apply
What happens to your application: test receives what you send here (your name, email, phone if given, your resume and your answers). If you apply with your Orbit account, only the resume you choose is shared; nothing else from your Orbit account (practice, interview help, LinkedIn, other documents) is ever shown to test. Orbit's AI reads your resume to sort applications and to explain how it matches the job's requirements; it doesn't use your name, age, gender, photo or other personal traits, and it never rejects anyone. A person at test reviews every application and makes every decision. If you aren't selected, your application is deleted 12 months after that decision, or 12 months after the job closes if no decision was made. You can ask for it to be deleted at any time from the status page linked in your confirmation email; it is deleted within 30 days of your request.
Hiring with Orbit for Business.