Application Security Analyst

We are seeking a talented Application Security Analyst to join our verstatile team at Tonik .

Responsibilities :

The Application Security Analyst shall ensure that applications are developed, deployed and maintained based on security standards and best practices to protect the organization from potential threats and vulnerabilities. This role involves coordination with developers to ensure that security is embedded in software development.  

Security Assessments and reviews 

• Coordinate independent testing performed by third party service providers 
• Conduct security code reviews, static and dynamic analysis to identify potential vulnerabilities and security flaws of mobile and web applications 
• Track and monitor security issues from discovery to resolution 
• Prepare reports as part of vulnerability management 

Secure systems development 

• Develop and enforce secure coding standards 
• Provide security requirements and recommendation during the design and development phase of applications 
• Promote application security awareness among IT teams 
• Develop application security policies and procedures 

Security tools monitoring

• Manage and monitor application security tools on a day-to-day basis 
• Generate reports as part of monitoring 

Incident Response 

• Respond and manage security incidents related to applications 
• Assist the team in implementing application security-related projects and initiatives 

Qualifications :

 • Education: Bachelor’s degree in computer science, IT, Information security or a related field. Relevant certifications (CEH, OSCP) are highly desirable. 

• Experience: 

• 3 to 5 years in application security, software development or a related field 
• Hands-on experience on security tools such as static analysis, vulnerability scanners and penetration testing 
• Mobile application testing experience is desired. 

Technical Proficiency: 

• Proficiency in one or more programming languages 
• Familiarity with secure coding practices and standards (such as OWASP, SANS) 
• Knowledgeable in DevSecOps and cloud security 

• Skills: Strong problem-solving skills, attention to detail, works well with various teams