Sr AppSec Analyst

Role Summary:
Seeking a Senior AppSec Analyst with strong hands-on DAST/SAST and vulnerability management experience to perform dynamic security testing, identify vulnerabilities, and support development teams in integrating security into the SDLC/DevSecOps processes.

Key Responsibilities:

• Perform DAST on web applications and APIs; identify and analyze security vulnerabilities.
• Configure, tune, and maintain DAST tools such as Burp Suite, OWASP ZAP, or commercial scanners.
• Integrate security testing into CI/CD and DevSecOps pipelines.
• Conduct API security testing and assess authentication mechanisms including OAuth2, JWT, and SSO.
• Provide detailed vulnerability reports and remediation guidance to development teams.
• Support Secure-by-Design practices and secure coding initiatives.
• Work closely with development and data platform teams to remediate application/data security issues.
• Ensure applications meet security standards, policies, and compliance requirements.

Required Qualifications:

• 7+ years of Application Security experience with strong DAST expertise.
• Strong hands-on experience with DAST/SAST and vulnerability assessment/remediation.
• Expertise in OWASP Top 10 and web application security.
• Experience automating security scans and integrating results into DevSecOps/CI/CD pipelines.
• Programming/scripting experience in at least one language.
• Relevant certifications such as OSWE, GWEB, Security+ are a plus.