Senior Application Security Engineer

Mountain ridge
5,000 to 7,000 EURO Gross per month
Almaty / Hybrid

An international technology company specializing in AI-powered biometric solutions and remote identity verification. The role focuses on securing AI-powered biometric solutions and remote identity verification workflows used across fintech, banking, telecommunications, and government sectors in more than 30 countries.

Responsibilities

• Conduct manual security audits and penetration tests of web applications and APIs, using OWASP Top 10 and API Top 10 as references.
• Analyze and reverse-engineer client-side JavaScript, including obfuscation and deobfuscation, and assess browser-based media capture workflows such as getUserMedia and WebRTC.
• Assess liveness detection systems against attacks and media substitution.
• Write automation scripts in Python and JavaScript, analyze network traffic with Burp Suite, and develop vulnerability proofs of concept.
• Prepare technical reports, calculate CVSS scores, and work with developers to remediate vulnerabilities.

Requirements

• At least 5 years of experience in application security or web application penetration testing.
• Higher education in Computer Science or Information Security, or relevant professional certifications such as OSCP, OSWE, BSCP, or eWPT.
• Strong knowledge of OWASP Top 10, client-side code analysis, and traffic interception using Burp Suite.
• Strong scripting skills in Python and JavaScript.
• Fluent Russian and professional working proficiency in English.

Optional

• Experience in biometric security and anti-spoofing.
• Knowledge of RASP and client-side protection mechanisms.
• Basic knowledge of Android and iOS security.