Intelligence Match
Match: ??%
Unlock Your Personalized Match
Sign in to see your exact score breakdown and personalized insights.
Team Tagline
About the role
Strivo Labs is a digital solutions company helping businesses scale with speed and precision, offering end-to-end services from custom design and MVP development to automation and content creation.
We are seeking a competent Application Security Engineer to assess and strengthen the security of our applications, APIs, and authentication systems. The ideal candidate will have practical experience in application security testing, authorized penetration testing, vulnerability assessment, access control reviews, and session management.
The successful candidate will identify security vulnerabilities, evaluate their severity and potential business impact, and provide actionable recommendations to reduce security risks and protect sensitive information.
Required Skills
Preferred Skills
Similar Skills not Listed
Responsibilities
- Conduct security assessments of mobile applications, backend services, and APIs.
- Perform authorized penetration testing within an agreed scope to identify exploitable vulnerabilities.
- Assess API security, including authentication, authorization, access controls, input validation, and data exposure.
- Review authentication mechanisms, session management, token handling, and access revocation processes.
- Test for common application security vulnerabilities, including broken access control, injection flaws, insecure configurations, and authentication weaknesses.
- Assess whether users can access information or perform actions beyond their assigned permissions.
- Evaluate the security of sensitive data transmitted between applications, APIs, and backend services.
- Identify and document vulnerabilities, including their severity, likelihood, potential impact, and recommended remediation.
- Rate vulnerabilities using an established methodology, such as CVSS, where appropriate.
- Prepare comprehensive security assessment reports for technical and management stakeholders.
- Work with developers and infrastructure teams to validate findings and recommend appropriate fixes.
- Conduct retesting to confirm that identified vulnerabilities have been resolved.
- Maintain clear records of testing activities, findings, evidence, and remediation status.
- Ensure all security testing is conducted within approved authorization, scope, and rules of engagement.
Job Application Safety Disclaimer
Your security and privacy are our top priorities. Please be aware that InStreamIQ will never ask you to pay any fees for job applications, placements, or training as a condition of employment.
Furthermore, legitimate employers will not ask for sensitive personal identification such as your Bank Verification Number (BVN), National Identification Number (NIN), or Passport details during the initial application phase. Do not share financial information or make any payments to individuals or organizations claiming to represent an employer. If you encounter any suspicious requests, please report the listing immediately via our support channels.