Application Security Analyst

What You'll Do: The Application Security Analyst in Enterprise will report to the Application Security Lead

• Typical daily work will consist of independently performing manual application penetration tests on web, mobile, APIs, and microservices across production and pre-production environments under defined testing scopes.
• Conduct secure code reviews and assist in design-level security assessments in collaboration with development and DevSecOps teams.
• Identify, validate, and document application security vulnerabilities related to OWASP Top 10, SANS Top 25, misconfigurations, and common insecure coding or design patterns.
• Provide technical guidance to junior AppSec testers, review assessment outputs, validate findings, and support skill development through peer reviews and knowledge sharing.
• Utilize industry-standard tools such as Burp Suite Pro, OWASP ZAP, Snyk, Checkmarx, Black Duck, Postman, and custom scripts to identify vulnerabilities at both runtime and source code levels.
• Ensure high-quality security testing by following established testing standards, performing peer validation of findings, and ensuring vulnerabilities are accurate, reproducible, and well-evidenced.
• Collaborate closely with developers, QA engineers, and architects to support remediation efforts and promote secure coding practices.
• Assist in providing security awareness and guidance to internal stakeholders to improve application security maturity.
• Support incident response activities by assisting in root cause analysis, vulnerability validation, and post-incident security assessments related to application security issues.
  

What You'll Bring:

• Bachelor’s in computer science /management of computer information/information assurance or Cybersecurity
• 0-4 years of Penetration Testing / Application Security / Offensive Security
• Must have Security Certifications:  OSCP/eWPTx and OSWA/OSWE/CWES/CWEE
• Preferred Security Certifications: CRTP/CARTP, CRTE, OSEP, GRTP
• Preferred Security Cloud Certifications: AWS CLP, AWS Security Specialty
• Must be a self-starter who can learn quickly and independently.
• Fluency in English
• Client-first mentality
• Intense work ethic
• Collaborative spirit and problem-solving approach

What You'll Do: The Application Security Analyst in Enterprise will report to the Application Security Lead

• Typical daily work will consist of independently performing manual application penetration tests on web, mobile, APIs, and microservices across production and pre-production environments under defined testing scopes.
• Conduct secure code reviews and assist in design-level security assessments in collaboration with development and DevSecOps teams.
• Identify, validate, and document application security vulnerabilities related to OWASP Top 10, SANS Top 25, misconfigurations, and common insecure coding or design patterns.
• Provide technical guidance to junior AppSec testers, review assessment outputs, validate findings, and support skill development through peer reviews and knowledge sharing.
• Utilize industry-standard tools such as Burp Suite Pro, OWASP ZAP, Snyk, Checkmarx, Black Duck, Postman, and custom scripts to identify vulnerabilities at both runtime and source code levels.
• Ensure high-quality security testing by following established testing standards, performing peer validation of findings, and ensuring vulnerabilities are accurate, reproducible, and well-evidenced.
• Collaborate closely with developers, QA engineers, and architects to support remediation efforts and promote secure coding practices.
• Assist in providing security awareness and guidance to internal stakeholders to improve application security maturity.
• Support incident response activities by assisting in root cause analysis, vulnerability validation, and post-incident security assessments related to application security issues.
  

What You'll Bring:

• Bachelor’s in computer science /management of computer information/information assurance or Cybersecurity
• 0-4 years of Penetration Testing / Application Security / Offensive Security
• Must have Security Certifications:  OSCP/eWPTx and OSWA/OSWE/CWES/CWEE
• Preferred Security Certifications: CRTP/CARTP, CRTE, OSEP, GRTP
• Preferred Security Cloud Certifications: AWS CLP, AWS Security Specialty
• Must be a self-starter who can learn quickly and independently.
• Fluency in English
• Client-first mentality
• Intense work ethic
• Collaborative spirit and problem-solving approach