IT Security Analyst

As an IT Security Senior Analyst at our company, your role will involve performing penetration testing (PT), SAST, and articulating findings clearly to asset owners. Your collaborative skills will play a crucial role in this position. **Key Responsibilities:** - Build a Secure Development Lifecycle (SDLC) by integrating SAST, SCA, DAST, and penetration testing into the development pipeline. - Conduct penetration testing on various components such as web applications, APIs, mobile applications (iOS + Android), and infrastructure (servers + networks). - Perform SAST & DAST scans, analyze tool results, conduct manual code reviews, provide remediation support, and review open source components. - Assess, report, and address identified vulnerabilities. - Validate and triage issues as part of the responsible disclosure program. - Provide status reports to the PT Service owner and other stakeholders regarding key metrics, risk indicators, trending, and compliance. - Analyze security assessment results and threat feeds to effectively respond to security weaknesses or vulnerabilities. - Support the automation of the Vulnerability Management program to enhance efficiency and effectiveness. - Configure and maintain regular and ad-hoc vulnerability scans using SAST & DAST tools on internal and external applications. **Experience & Qualifications:** - Minimum of 1.5 years of experience in performing penetration testing on web applications, APIs, mobile applications (iOS + Android), and infrastructure (servers + networks). - Experience with SAST & DAST programs, and the ability to develop and communicate SDLC processes. - Proficiency in manual source code review. - Familiarity with tools such as Burp Suite, Veracode, Acunetix, Kali Linux, Android Studio (AVD). - Good understanding of Windows, Linux, Active Directory, and networking protocols.,