Application Security Analyst

Job Description: Application Security Analyst

Position Overview:

We are seeking a skilled and motivated VAPT Analyst to join our dynamic team. The ideal candidate will have a strong background in performing Security Assessment and Testing (SAST, DAST), along with expertise in Mobile Application Testing for both Android and iOS platforms. The role involves identifying, assessing, and remediating security vulnerabilities across various systems and applications to ensure the integrity and confidentiality of our organization's data.

Key Responsibilities:

- Conduct comprehensive vulnerability assessments and penetration tests on web applications, networks, and systems to identify security weaknesses and potential threats.

- Perform Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) using industry-standard tools and methodologies.

- Evaluate mobile applications for security vulnerabilities and conduct both manual and automated testing on Android and iOS platforms.

- Collaborate with cross-functional teams to analyze and interpret security assessment results, prioritize findings, and recommend remediation strategies.

- Develop detailed reports documenting assessment findings, risk levels, and recommended mitigation measures for stakeholders.

- Stay current with emerging security threats, vulnerabilities, and best practices in the field of information security.

- Participate in security incident response activities and contribute to the development and enhancement of security policies and procedures.

Required Qualifications:

- Bachelor's degree in Computer Science, Information Security, or related field.

- Minimum of 3 years of experience in performing vulnerability assessments and penetration testing.

- Hands-on experience with industry-leading security assessment tools such as Burp Suite, Nessus, Metasploit, and OWASP ZAP.

- Proficiency in conducting Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) using tools like Checkmarx, Fortify, or Veracode.

- Strong understanding of common web application vulnerabilities (e.g., SQL injection, XSS, CSRF) and mobile application security principles.

- Experience in testing mobile applications on both Android and iOS platforms, including knowledge of platform-specific security controls and vulnerabilities.

- Excellent analytical and problem-solving skills with the ability to prioritize and manage multiple tasks in a fast-paced environment.

- Effective communication skills with the ability to convey technical information to non-technical stakeholders.

- Relevant industry certifications such as eWPT, eMAPT, Certified Mobile Pentester – Android (CMPen-Android), the Certified Mobile Pentester – iOS (CMPen-iOS) are preferred.

Preferred Qualifications:

- Experience in conducting Red Team exercises and simulated attacks.

- Familiarity with DevSecOps practices and integrating security into the software development lifecycle (SDLC).

- Understanding of regulatory compliance requirements (e.g., GDPR, HIPAA, PCI DSS) and their implications for security assessments.