{"id":544362,"url":"https://alion.io/job/sun-king-application-security-engineer","title":"Application Security Engineer","company":{"id":177485,"name":"Sun King","domain":"sunking.com","url":"https://alion.io/company/sun-king","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Pinpoint","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New Delhi, India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":10000,"max_usd":29000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":623},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Cloudflare WAF","optional":false},{"name":"DigitalOcean","optional":false},{"name":"Firebase","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Istio","optional":false},{"name":"Keycloak","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Service Mesh","optional":false}],"status":"live","first_seen_at":"2026-09-07T11:07:30Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-30T01:57:32Z","board_verified":true,"closed_at":null,"days_open":52,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":52},"description":"Job location: Remote\n\nAbout the role:\n We are looking for an Application Security Engineer to own the end-to-end security posture of our\nproduct platform - spanning mobile applications, REST APIs, microservices, cloud infrastructure, and\nthird-party integrations. In this role, the Application Security Engineer will be involved into the\nproduct and engineering lifecycle early, shaping secure design decisions before code is written, and\nvalidating them through rigorous assessment. \n\nWhat you will be expected to do\n\nOwn application security responsibility for assigned business functions by performing threat\nmodeling, architecture reviews, penetration testing, secure coding programs, and vulnerability\nmanagement.\nPerform manual penetration testing and vulnerability assessments on web applications, APIs,\nand android mobile applications.\nPerform security reviews for AI-native products, models, pipelines, and inference services.\nOnboard applications into the SSDLC program and be a security point of contact for the\napplication product.\nOwn security incident response for product-layer issues, define remediation plans, and track\nfixes through to closure.\nIntegrate and tune SAST/DAST/IAST/SCA tools in CI/CD, create custom rules where needed and\nactively triage false positives.\nReview and harden cloud infrastructure - Kubernetes RBAC, pod security, network policies,\nIstio service mesh, Keycloak/OIDC configurations, and IAM across AWS, DigitalOcean, GCP, and\nFirebase.\nCommunicate vulnerabilities and risk clearly to developers, product managers, and leadership\n- in language that drives actionable results.\nConduct application security training for engineers, product managers etc.\n\nYou might be a strong candidate if you have/are\n\nBachelor's degree in Computer Science, Cyber Security, or any related fields.\nAt least 2 years of hands-on application security experience, ideally in product-based or SaaS\ncompanies working directly with engineering teams.\nGood understanding of OWASP Top 10, API Security Top 10, and common authorization flaws\nincluding BOLA, BFLA, and privilege escalation.\nExperience in manually testing web apps, APIs, and Android apps, manual code reviews\n(beyond just running tools).\nFamiliarity with OAuth2, OIDC, JWT, and typical misconfigurations in providers such as Keycloak\nand Firebase.\nExperience integrating and tuning SAST/DAST (and optionally SCA/IAST) tools within CI/CD\npipelines.\nExposure to cloud-native security: Kubernetes, containers, service mesh (Istio mTLS and\npolicies), and IAM concepts across at least one major cloud provider.\nExperience with Cloudflare WAF, perimeter security scanning, and/or red-team testing is a\nplus.\nFamiliarity with AI/LLM security risks (e.g., OWASP LLM Top 10).\nPractical experience implementing guardrails, prompt validation, output filtering, or other\nsafety controls in production AI features, or assessing insecure use of third-party AI APIs.\nAbility to script/automate (e.g., Python, Bash) to streamline testing, data collection, and\nreporting.\nInterest in or experience with building AI based security tools that improve coverage or reduce\nmanual toil.\nWhat Sun King offers\nProfessional growth in a dynamic, rapidly expanding, high-social-impact industry\nAn open-minded, collaborative culture made up of enthusiastic colleagues who are driven by the challenge of innovation towards profound impact on people and the planet.\nA truly multicultural experience: you will have the chance to work with and learn from people from different geographies, nationalities, and backgrounds.\nStructured, tailored learning and development programs that help you become a better leader, manager, and professional through the Sun King Center for Leadership.","description_format":"text","description_chars":3731,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Energy Storage","Solar Energy"],"lifecycle":[{"event":"open","at":"2026-09-08T11:07:30Z"}],"visa":[],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":1,"p_active":0.588,"p_room":0.28,"age_days":51,"expected_fill_days":23,"reasons":["conf:2","velocity","win:tail","crowd:junior,brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/sun-king-application-security-engineer","json_url":"https://alion.io/job/sun-king-application-security-engineer.json","meta":{"generated_at":"2026-10-30T04:47:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6658,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":177485},"rest":"https://alion.io/mcp/rest/get_company?id=177485"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsun-king-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsun-king-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsun-king-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sun-king-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsun-king-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":544362}},{"tool":"search_jobs","arguments":{"company":"sunking.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":544362},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}