At Ibtekarmind, we are looking for Cyber Security Expert to identify, assess, and mitigate security risks across web, mobile, API, and backend applications. The engineer will work closely with software development, DevOps, infrastructure, cybersecurity, and QA teams to integrate security throughout the Software Development Life Cycle (SDLC) and ensure applications are secure, reliable, and compliant with recognized security best practices.

Key Responsibilities:

·        Perform application security assessments, vulnerability testing, and code security reviews.

·        Identify, analyze, prioritize, and support remediation of security vulnerabilities in web, mobile, API, and backend applications.

·        Integrate security controls and best practices throughout the Software Development Life Cycle (SDLC).

·        Review application architecture, APIs, authentication, authorization, session management, and data protection mechanisms.

·        Work closely with software development, DevOps, QA, infrastructure, and cybersecurity teams to implement secure development practices.

·        Provide secure coding guidance and support developers in resolving identified security issues.

·        Monitor emerging application security threats, vulnerabilities, and attack techniques.

·        Support security testing before application releases and major system changes.

·        Maintain application security documentation, vulnerability reports, risk assessments, and remediation tracking.

·        Support incident investigation and root-cause analysis for application-related security events.

·        Ensure applications follow recognized security standards and best practices, including OWASP guidelines and secure coding principles.

Required Qualifications:

• ·       Bachelor’s degree in Cybersecurity, Computer Science, Software Engineering, Information Technology, or a related field. A Master’s degree is preferred.
• ·       Strong understanding of application security principles, secure coding practices, and common software vulnerabilities.
• ·       Knowledge of OWASP Top 10, API security, authentication, authorization, session management, and data protection.
• ·       Hands-on experience with SAST, DAST, vulnerability scanning, and application security testing tools.
• ·       Familiarity with programming or scripting languages such as Python, kotlin, Java, JavaScript, C#, PHP, or similar technologies.
• ·       Experience assessing the security of web applications, mobile applications, APIs, and backend services.
• ·       Understanding of secure SDLC, threat modeling, code review, and vulnerability management.
• ·       Knowledge of networking, operating systems, databases, encryption, and security protocols.
• ·       Familiarity with Git, CI/CD pipelines, DevSecOps practices, and containerized environments.
• ·       Ability to analyze security findings, determine risk, and provide practical remediation recommendations.
• ·       Strong analytical, problem-solving, documentation, and communication skills.
• ·       Ability to collaborate effectively with development, DevOps, QA, infrastructure, and cybersecurity teams.

Preferred Qualifications:

• ·       Hands-on experience in web and API application security testing.
• ·       Practical knowledge of OWASP Top 10 and common application vulnerabilities.
• ·       Experience with manual penetration testing and vulnerability assessment.
• ·       Practical experience with tools such as Burp Suite, OWASP ZAP, Nmap, or similar tools.
• ·       Basic experience with secure code review and secure coding practices.
• ·       Knowledge of authentication, authorization, session management, input validation, and data protection.
• ·       Familiarity with Android and iOS application security is an advantage.
• ·       Experience working with developers to identify and remediate application security issues.
• ·       Relevant cybersecurity training or certification such as CEH, Security+, eJPT, or equivalent is an advantage.

Plus, Points:

• ·       Experience with Android and iOS application security testing.
• ·       Familiarity with API security testing and common API vulnerabilities.
• ·       Basic knowledge of secure code review in languages such as Java, Kotlin, JavaScript, PHP, or Python.
• ·       Hands-on experience with Burp Suite and/or OWASP ZAP; familiarity with MobSF or similar mobile application security tools is an advantage.
• ·       Familiarity with Git, CI/CD, and DevSecOps practices.
• ·       Experience participating in CTFs, bug bounty programs, or practical security labs.
• ·       Knowledge of application authentication, authorization, encryption, and secure data storage.
• ·       Experience working directly with developers to verify and remediate security findings.
• ·       Relevant application-security training or certification is an advantage.

Experience Requirement:

• ·       5+ years of relevant experience in application security, penetration testing, or secure software development.
• ·       Hands-on experience in web and API security testing.
• ·       Practical experience identifying, assessing, and supporting remediation of application vulnerabilities.
• ·       Experience using tools such as Burp Suite, OWASP ZAP, or similar application security tools.
• ·       Experience with OWASP Top 10, secure coding practices, and vulnerability assessment.
• ·       Experience working with developers to verify, prioritize, and remediate security findings.
• ·       Experience with mobile application security testing for Android or iOS is an advantage.
• ·       Familiarity with secure SDLC, code review, and application security testing before release is preferred.

What We Offer:

• ·       Competitive salary based on qualifications and experience.
• ·       Hands-on work with real-world application security projects.
• ·       Opportunities to strengthen skills in web, API, and mobile application security.
• ·       Access to practical security testing tools and secure development environments.
• ·       Collaboration with software development, DevOps, QA, and cybersecurity teams.
• ·       Opportunities for technical training, professional development, and career growth.
• ·       Opportunity to contribute to secure, locally developed, and self-hosted applications.

Applicants are required to mention the Job Title and Vacancy # in the subject line of their email. Please attach your updated CV and a cover letter and send them to hr@ibtekarmind.com, with a copy (CC) to Ibtekarmind2026@gmail.com. The application deadline is 09-Sept-2026, so ensure your submission is sent before this date.

Only shortlisted candidates will be contacted for an interview and a demo session. We look forward to receiving your applications.