This is a dummy data field not used in generation

About the Company

Provido is a global technology company that goes beyond traditional IT services. We are a hub of innovation, creativity, and engineering excellence, designing and delivering intelligent, secure, and high-performance digital solutions. Our dynamic international ecosystem brings together forward-thinking engineers, technology specialists, designers, and delivery professionals who transform ideas into scalable, real-world solutions with measurable business impact. We invest deeply in our people, fostering a culture of progress, creativity, and inclusivity.

Role Overview

The Application Security Engineer plays a critical role in embedding security across the entire software development lifecycle. This position involves conducting threat modeling, secure code review, and vulnerability assessments to protect enterprise and player-facing applications. The ideal candidate is an experienced security professional with strong knowledge of secure coding practices, web, mobile, and API security, and modern DevSecOps tooling. This role is based on-site in Hyderabad and requires close collaboration with global engineering, product, and operations teams to champion secure-by-design principles.

Key Responsibilities

• Perform security assessments of web, mobile, and API-based applications, including manual testing and automated scanning.
• Conduct threat modeling and secure design reviews during application architecture and design phases.
• Review source code manually and with SAST tooling to identify and remediate vulnerabilities such as injection, broken authentication, insecure deserialization, and business logic flaws.
• Integrate and tune SAST, DAST, SCA, and IAST tools within CI/CD pipelines to shift security left.
• Partner with development teams to triage findings, prioritize remediation, and provide secure-coding guidance and training.
• Track and report on application security metrics, vulnerability trends, and remediation SLAs to engineering leadership.
• Support incident investigations involving application-layer issues and contribute to root-cause analysis and preventive controls.
• Maintain awareness of OWASP Top 10, CWE/SANS Top 25, and emerging threats relevant to gaming, fintech, and digital services.

Tech Stack

• Languages: Java, C#, Python, JavaScript/TypeScript, Go
• Security Tools: Checkmarx, Veracode, Burp Suite, SonarQube, Snyk (SAST, DAST, SCA, IAST)
• CI/CD: Jenkins, GitLab CI, GitHub Actions, Azure DevOps
• Cloud Platforms: AWS, Azure, GCP
• Container/Orchestration: Docker, Kubernetes
• Mobile: iOS, Android (including reverse engineering)
• API & Architecture: REST, GraphQL, microservices, event-driven architectures
• Game Development: Unity, Unreal Engine

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Software Engineering, or a related discipline.
• 3-5 years of experience in application security, secure software development, or penetration testing.
• Strong understanding of web application security, OWASP Top 10, and secure coding practices in languages such as Java, C#, Python, JavaScript/TypeScript, or Go.
• Hands-on experience with SAST, DAST, and SCA tools (e.g., Checkmarx, Veracode, Burp Suite, SonarQube, Snyk).
• Experience integrating security testing into CI/CD pipelines (Jenkins, GitLab CI, GitHub Actions, or Azure DevOps).
• Experience securing applications in the gaming industry, including familiarity with anti-cheat, in-game economy abuse, account takeover, fraud, and platform-specific risks across PC, mobile, and console environments.
• Strong analytical, communication, and documentation skills, with the ability to work effectively alongside engineering and product teams.
• Working proficiency in English to support multinational teams and stakeholders.
• Availability to work on-site in Hyderabad, India.

Preferred Skills

• Professional certifications such as OSCP, OSWE, GWAPT, CSSLP, CISSP, or equivalent.
• Experience with cloud-native application security across AWS, Azure, or GCP, and with container and Kubernetes security.
• Familiarity with mobile application security (iOS, Android) and reverse engineering techniques.
• Contributions to bug bounty programs, CTF competitions, or open-source security tooling.
• Knowledge of regulatory and compliance frameworks relevant to gaming and digital services, such as PCI-DSS, GDPR, and ISO 27001.
• Experience with API security, GraphQL, microservices, and event-driven architectures.
• Exposure to game engines and platforms (e.g., Unity, Unreal) and understanding of gaming-specific threat vectors.

Why You’ll Love Working with Us

Provido offers competitive compensation, performance incentives, flexible working options, comprehensive health and well-being support, career advancement programs, an inclusive and team-oriented workplace, and regular social activities.

3-5 years experience in application security

At Provido, we value our employees and nurture a culture of progress and creativity. Our team members enjoy a supportive, inclusive, and growth-focused environment. Competitive Compensation & Performance Incentives: Provido offers an attractive salary package and performance-based bonuses to recognize and reward your contribution. Flexible Working Options: We support remote and hybrid working models to help you maintain a healthy work-life balance. Health & Well-being Support: We provide comprehensive health insurance, wellness initiatives, and resources to support both physical and mental well-being. Career Advancement & Development Programs: We invest in continuous learning through training programs, mentorship, and clearly defined career development paths. Team-Oriented & Inclusive Workplace: Our culture is built on diversity, inclusion, and collaboration. Every voice matters and innovation is encouraged. Team Events & Social Activities: We organize regular team-building activities and social events to strengthen relationships and create a positive, connected workplace.