CYBER SECURITY ANALYST I | APPSEC
Core
Application Security Analyst supporting the identification and prevention of vulnerabilities throughout the software development lifecycle.
Role type
Application Security Analyst (AppSec)
Builds
Secure web applications and APIs
Domain
Financial services / Application Security
Deliverable
production ML models
Required skills
Software development, APIs, Web applications, Programming/scripting languages, OWASP Top 10, Git, HTTP/HTTPS, Authentication/Authorization, AI models for vulnerability detection, CIA triad fundamentals
Preferred skills
SAST, DAST, SCA, Burp Suite, Veracode, Snyk, SonarQube, CI/CD, DevSecOps, Cloud security, API security, Docker/containers, Software development lifecycle phases
Technologies
Burp Suite, Veracode, Snyk, SonarQube, Docker, CI/CD pipelines
Responsibilities
Execute and monitor security analysis on applications and APIs; Operate SAST, SCA, and AppSec tools; Identify and track vulnerabilities with development teams; Participate in threat modeling and security reviews; Support Security Champions initiatives; Contribute to security automations and AI integrations in CI/CD pipelines; Perform technical analysis using OWASP, CWE, and CAPEC references; Create documentation, reports, and metrics; Collaborate with Development, Architecture, and Information Security teams.
