Application Security Engineer

About this role

Strivo Labs in Lagos is looking for an Application Security Engineer to assess and strengthen the security of its applications, APIs and authentication systems. The role involves performing security testing, authorized penetration testing, vulnerability assessments and reviews of access control and session management. The successful candidate will identify vulnerabilities, evaluate their severity, and provide actionable remediation recommendations. The employer provides end-to-end digital solutions and partners with developers and infrastructure teams to validate fixes and re-test vulnerabilities. The position requires a background in cybersecurity or related field and practical experience in application security and testing.

What you would do

• Conduct security assessments of mobile apps, backend services and APIs
• Perform authorised penetration testing within an agreed scope
• Assess API security, including authentication, authorization, access controls and data exposure
• Review authentication mechanisms, session management and token handling
• Test for common vulnerabilities such as broken access control, injections, insecure configurations and authentication weaknesses
• Evaluate whether users access information or actions beyond permissions
• Evaluate security of data transmitted between apps, APIs and backends
• Identify, document and rate vulnerabilities with remediation recommendations
• Prepare security assessment reports for technical and management audiences
• Coordinate with developers and infrastructure teams to validate fixes and perform retesting to close findings

What they are asking for

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology or related field or equivalent practical experience
• demonstrable experience in application security, penetration testing or vulnerability assessment or related security role
• Strong understanding of web application and API security principles
• Experience testing REST APIs and mobile application security
• Knowledge of authentication, authorization, session management and access control mechanisms
• Familiarity with OWASP Top 10 and common vulnerabilities
• Experience using security testing tools (e.g., Burp Suite, OWASP ZAP, Postman) or similar
• Ability to identify, reproduce, document and assess security vulnerabilities
• Strong analytical, technical writing and problem-solving skills
• Commitment to secure software development practices and remediation

Listing details are summarised from the source. Always confirm the role and the employer on the original posting before applying, and never pay to apply for a job.