Senior Application Security Engineer

4 weeks ago


bangalore, India Zynga Full time

AVAILABLE POSITIONS Senior Application Security Engineer

Careers Category: Engineering

Careers location: Bengaluru, India

Connected Worker Type: Connected

R_111904

Job Summary:

We are currently seeking a Senior Application Security Engineer to join our Product Security team. The team assesses, enables, and influences the secure design, development, operation and usage of games, while also providing Offensive Security and Penetration testing capabilities. This individual will assess the security of gaming applications by analyzing their codebase, identifying vulnerabilities through reverse engineering, and evaluating the efficiency of security controls implemented on mobile gaming apps to ensure player data and interactions remain secure and protected. The right candidate for this position has the technical knowledge and experience performing network and application penetration testing (both in code and live applications) in a fast-paced, agile and startup-like environment.

Responsibilities:

Conduct thorough penetration tests on applications, systems, and networks to identify vulnerabilities. Apply industry-standard tools and techniques to simulate real-world attacks and assess security weaknesses. Perform in-depth assessments of applications across platforms (iOS, Android, Nintendo, Steam and more) to identify security flaws. Assess the security of APIs by analyzing authentication, authorization mechanisms, input validation, and potential vulnerabilities. Craft comprehensive and clear reports detailing assessment findings, vulnerabilities, and recommended remediation steps. Maintain accurate and up-to-date documentation of tests, methodologies, and discovered vulnerabilities. Stay up-to-date with the latest threats, attack vectors, and security trends and be ready to apply them in our environment. Engage in continuous learning and research to improve your skills and contribute to the team's knowledge base.

Desired Skills and Experience:

4-6 years of proven experience in pen-testing and vulnerability assessment Experience with secure coding practices, code review, and familiarity with programming languages commonly used in game development ex: C, C++, C#, Go, Python, PHP, Obj-C/Swift, Linux and OSX Solid understanding of reverse engineering tools and techniques. Proficiency in assessing mobile applications for security vulnerabilities. Experience with API security testing and assessment. Familiarity with gaming-related security challenges and solutions is desirable A good rank in well-known bug bounty platforms is a plus Proven experience with tool development and security automation will be a strong plus Excellent problem-solving and critical-thinking skills. Strong written and verbal communication skills for crafting clear and effective reports. Ability to work independently and effectively in a fast-paced environment with changing priorities Ethical attitude with a dedication to maintaining the highest standards of integrity and professionalism.

Join the team and play a pivotal role in securing our systems, applications, and networks against evolving cyber threats. If you're passionate about hacking for good and want to make a meaningful impact, we encourage you to apply.

What We Offer You:

Work in a studio that has complete P&L ownership of games Create next-gen games that will be played and loved by millions of players around the world Work in a collaborative team that invests in your development and growth on-the-job Competitive salary and bonus plan Extended Health coverage, disability, critical illness and life insurance Child care facilities for women employees and discounted facilities for male employees Virtual mental health and neurodiversity support programs Family planning support program Additional leave options for most employees Employee Assistance Programs Frequent employee events Flexible working hours on many teams A diverse team of friendly, fun and supportive co-workers Culture of diversity and inclusion including employee resource groups that connect Zyngites through culture, lifestyle and fun

Zynga does not engage in financial exchanges during the recruitment or onboarding process. We do not conduct job interviews over third-party messaging apps such as Telegram, WhatsApp or others. We will never ask you for your personal or financial information over unofficial chat channels. Our in-house recruitment team only contacts individuals via official company email addresses (i.e., via a zynga.com or naturalmotion.com email domain).

If you believe you have been the victim of a scam, you may wish to contact the authorities. In the United States, you may file a complaint with the FBI. More information is available here:

Select Your Country of Residence

Apply

  • bangalore, India Abha Engineer Full time

    We are looking for a Senior Mechanical EngineerRoles are described below.1. Manpower Planning.2. Preparing of Project Cost.3. Schedule wise work execution.4. As Drawing & quality work execution.5. Client & Third Party Manage.6. Working Team Manage & Review.7. Reporting to Management.8. ROB & FOB Fabrication & Erection Work Knowledge.


  • bangalore, India Zeta Services Inc. Full time

    About ZetaZeta is a Next-Gen Banking Tech company that empowers banks and fintechs to launch banking products for the future. It was founded by and Ramki Gaddipati in 2015.Our flagship processing platform - Zeta Tachyon - is the industry’s first modern, cloud-native, and fully API-enabled stack that brings together issuance, processing, lending, core...


  • bangalore, India Sumo Logic Full time

    Senior Software Engineer-II: Application Security  Application Security SREs at Sumo Logic partner with our development teams, Security Operations Center (SOC), to ensure our products are secure and compliant. You will ensure operational excellence, security, and compliance of our entire cloud and technology stack! What you will do: ...


  • bangalore, India Randstad India Full time

    JobTitle: Senior Engineer Security Engineering Openings: 1 Skills required: Cloud Security Python ScriptDevops Years ofexperience required: 5 or 10 years Work Arrangement: Hybrid Location: Bengaluru

  • Senior Engineer

    1 week ago


    bangalore, India SHIELD Full time

    SHIELD is a device-first risk AI platform that helps digital businesses worldwide eliminate fake accounts and stop all fraudulent activities. SHIELD identifies the root of fraud with the global standard for device identification (SHIELD Device ID) and actionable risk intelligence, empowering businesses to stay ahead of new and unknown fraud threats. We are...


  • bangalore, India Anicalls (Pty) Ltd Full time

    Candidate should be able to:Create and manage bug bounty programs.Evangelize software security best practices.Perform threat modeling, architecture design reviews, and detection capabilitiesDevelop and implement security tooling.Partner with software engineering and product teams to ensure security throughout the SDLC.Candidate should have:Strong...


  • bangalore, India Amazon Development Centre (India) Private Limited Full time

    In Amazon Stores, we ship some of the widest arrays of technology found at any company. From amazon.com to world class machine learning pipelines, from cutting-edge digital healthcare to no-checkout retail, we push the boundaries of technology in every direction using the globe’s largest AWS deployment.As an AppSec engineer, you will collaborate with...


  • bangalore, India HappyFox Full time

    We’re looking for an experienced Security Engineer with at-least 5+ years of experience to join our Product Engineering teams to help keep our products secure. Responsibilities: Perform manual and automated application penetration tests and provide suggestions to harden our products Participate regularly in development and release process to identify...


  • bangalore, India Getinz Techno Services Full time

    Hiring Senior Mobile Application Security Engineer for a product company in the mobile-first risk intelligence platform (Fraud Detection Software) domain.Experience Range: 4 - 8 yrs Location: Koramangala, Bengaluru Work from office Requirements Bachelor's degree in Computer Science, Cybersecurity, or a related field Minimum of 4 years of experience within...


  • Bangalore/Kerala, IN IQMATRIX INFOWAYS SOLUTIONS PRIVATE LIMITED Full time

    Principal Accountabilities :- Lead by example and independently perform all functions and services of the GIS AppSec team.- Conduct advanced web application, micro-services, API, cloud penetration tests of proprietary and 3rd party on-prem/cloud systems and applications.- Perform targeted manual security reviews at key points in the software development life...


  • Bangalore/Kerala, India IQMATRIX INFOWAYS SOLUTIONS PRIVATE LIMITED Full time

    Principal Accountabilities :- Lead by example and independently perform all functions and services of the GIS AppSec team.- Conduct advanced web application, micro-services, API, cloud penetration tests of proprietary and 3rd party on-prem/cloud systems and applications.- Perform targeted manual security reviews at key points in the software development life...


  • bangalore, India Alp Consulting Limited Full time

    Key Responsibilities: - Conduct thorough security assessments of applications, identifying vulnerabilities and providing recommendations for remediation. - Collaborate with development teams to integrate security best practices into the software development lifecycle (SDLC). - Perform security code reviews and assist in the implementation of secure coding...


  • bangalore, India Ethos Full time

    About Ethos Ethos was built to make it faster and easier to get life insurance for the next million families. Our approach blends industry expertise, technology, and the human touch to find you the right policy to protect your loved ones.  We leverage deep technology and data science to streamline the life insurance process, making it more...


  • bangalore, India Livestream Full time

    As an Application Security Engineer III at Vimeo, you will engage in a variety of activities, either offensive, defensive, or some combination thereof, ultimately aimed at safeguarding our users who entrust Vimeo with their content every day. You’ll plan, carry out, and lead security initiatives to monitor and protect sensitive data and systems from...


  • bangalore, India News Corp Full time

    Job Description : Job Title: Senior Engineer, Security Engineering Job Location: Bengaluru, Karnataka Work Arrangement: Hybrid (3 days per week in office) Responsibilities: Build automation to provide for cybersecurity, CI/CD or similar applications Expected to be aware of IaaS, SaaS and PaaS technologies and have the...


  • bangalore, India Mindsprint Full time

    Position: Sr Engineer /Lead Engineer - Cyber SecurityLocation: Chennai/BangaloreSummary:We're seeking a seasoned Senior Cyber Security Engineer with 6-8 years of experience to fortify our team. Your role involves ensuring the security of cloud infrastructure and applications through meticulous assessment and implementation of robust security measures.Key...

  • Senior Engineer

    1 week ago


    bangalore, India First Advantage Full time

    Who You Are:You are self-motivated and ready to “roll up your sleeves." While you are an independent contributor, you are also collaborative. You can spearhead a project and see it through from start to completion.As a team player, you navigate cross-functional teams and work well with team members in other business units and departments toward a common...


  • bangalore, India Rippling Full time

    About Rippling Rippling gives businesses one place to run HR, IT, and Finance. It brings together all of the workforce systems that are normally scattered across a company, like payroll, expenses, benefits, and computers. For the first time ever, you can manage and automate every part of the employee lifecycle in a single system. Take onboarding, for...


  • bangalore, India Vimeo, Inc. Full time

    You’ll plan, carry out, and lead security initiatives to monitor and protect sensitive data and systems from infiltration and cyber-attacks. You love to solve puzzles and are a great team player. This role is remote. What you’ll do: Penetration testing — either hunt for security issues on our production or staged applications during an...


  • bangalore, India ADCI - Haryana - D50 Full time

    In Amazon Stores, we ship some of the widest arrays of technology found at any company. From amazon.com to world class machine learning pipelines, from cutting-edge digital healthcare to no-checkout retail, we push the boundaries of technology in every direction using the globe’s largest AWS deployment.As an AppSec engineer, you will collaborate with...