Application Security (AppSec) Analyst

Role Overview

Help organizations defend their digital assets. You will perform vulnerability assessments, secure code reviews, and threat modeling across modern web and cloud applications.

Key Responsibilities

• Perform manual and automated code audits using SAST and DAST tooling
• Identify business logic vulnerabilities, access control flaws, and injection vectors
• Draft clear, actionable remediation guides for engineering teams
• Assist in DevSecOps pipeline automation (GitHub Actions, Semgrep, Snyk)
• Conduct research into emerging threats and novel exploit techniques

Requirements & Qualifications

• Hands-on experience with Burp Suite, OWASP ZAP, Nmap, and vulnerability scanners
• Ability to read and audit code written in JavaScript/TypeScript, PHP/Laravel, and Python
• Deep understanding of authentication mechanisms (OAuth, JWT, session cookies)
• Certifications such as CEH, eJPT, Security+, or OSCP are a strong plus
• Excellent written technical documentation skills

What We Offer

• Access to private security research labs and bug bounties
• Direct mentorship from senior security researchers
• Conference attendance and training sponsorship
• Performance-based bonuses