:
What You'll Do: The Application Security Analyst in Enterprise will report to the Application Security Lead
-
Typical daily work will consist of independently performing manual application penetration tests on web, mobile, APIs, and microservices across production and pre-production environments under defined testing scopes.
-
Conduct secure code reviews and assist in design-level security assessments in collaboration with development and DevSecOps teams.
-
Identify, validate, and document application security vulnerabilities related to OWASP Top 10, SANS Top 25, misconfigurations, and common insecure coding or design patterns.
-
Provide technical guidance to junior AppSec testers, review assessment outputs, validate findings, and support skill development through peer reviews and knowledge sharing.
-
Utilize industry-standard tools such as Burp Suite Pro, OWASP ZAP, Snyk, Checkmarx, Black Duck, Postman, and custom scripts to identify vulnerabilities at both runtime and source code levels.
-
Ensure high-quality security testing by following established testing standards, performing peer validation of findings, and ensuring vulnerabilities are accurate, reproducible, and well-evidenced.
-
Collaborate closely with developers, QA engineers, and architects to support remediation efforts and promote secure coding practices.
-
Assist in providing security awareness and guidance to internal stakeholders to improve application security maturity.
-
Support incident response activities by assisting in root cause analysis, vulnerability validation, and post-incident security assessments related to application security issues.
What You'll Bring:
-
Bachelor’s in computer science /management of computer information/information assurance or Cybersecurity
-
0-4 years of Penetration Testing / Application Security / Offensive Security
-
Must have Security Certifications: OSCP/eWPTx and OSWA/OSWE/CWES/CWEE
-
Preferred Security Certifications: CRTP/CARTP, CRTE, OSEP, GRTP
-
Preferred Security Cloud Certifications: AWS CLP, AWS Security Specialty
-
Must be a self-starter who can learn quickly and independently.
-
Fluency in English
-
Client-first mentality
-
Intense work ethic
-
Collaborative spirit and problem-solving approach