Application Security Analyst

Key Skills: Java, Threat Modeling, Application Security, SDLC, CICD, Secure Code Review, DAST, AWS, Cloud Security, Rest API, Containerization (Docker, Kubernetes), Azure Devops

Roles and Responsibilities:

• Provide application security guidance across application design, development, testing, and deployment activities.
• Conduct secure code reviews for Java applications, Spring Boot services, and REST APIs, and recommend practical remediation measures.
• Perform threat modeling and architecture reviews to identify application risks and establish secure design controls.
• Analyze DAST, penetration testing, vulnerability assessment, and software security findings; help teams prioritize and resolve issues.
• Promote DevSecOps practices by supporting automated security testing, vulnerability scanning, and security controls within delivery workflows.

Skills Required:

• 5 - 10 years of relevant experience in application security, secure software development, or DevSecOps.
• Hands-on application security experience across the software development lifecycle, with strong knowledge of secure development practices.
• Strong Java and Spring Boot understanding, including the ability to assess application architecture and backend services.
• Practical experience performing secure code reviews and threat modeling for enterprise applications.
• Experience with DAST and interpreting security findings to drive vulnerability remediation.

Good to Have:

• Experience with cloud security across AWS or Azure DevOps environments.
• Understanding of REST API security and containerization technologies such as Docker and Kubernetes.

Education: Any Graduate or Postgraduate degree.