Applications Security Analyst

Make an impact by working in sectors where technology is the enabler, everything is innovative and there is a constant need to be innovative.

Be part of a team that combines business knowledge, technological advantage, and design expertise. Our diverse training and specializations are key in developing solutions and experiences for digital clients.

Face challenges and learn different ways of thinking and viewing the world – there is always room for your energy and creativity.

About the role

Celfocus is looking to add an Applications Security Analyst to our team.

As part of your job, you will:

- Conduct threat analysis and modeling for new and existing Celfocus products/projects.

- Analyze and discuss requirements; interact with all stakeholders in the software development process.

- Perform penetration testing on web applications.

- Conduct manual and automated testing.

- Participate in the creation and development of the company’s products at all stages of their life cycle.

What are we looking for?

- Previous experience as a DevSecOps Security Analyst.

- Deep knowledge of security tools.

- Deep knowledge of CI/CD.

- Deep knowledge of vulnerabilities.

- Basic understanding of security compliance requirements.

- Ability to align with Analysts, Designers, Architects, Developers, and DevOps teams.

- Knowledge of HTTP.

- Practical knowledge of programming languages.

- Knowledge of the 10 most common OWASP vulnerabilities: how to find, exploit, and fix them.

- Knowledge of Burp Suite or other popular web scanners like ZAP, Acunetix, Netsparker, etc.

- Willingness and ability to work as a team.

- Desire to grow in the area of application security.

- An active and flexible mind, clear logic, and a detail-oriented approach.

- Knowledge of English, at least at the level of reading technical documentation.

Nice to have:

- Good knowledge of Linux or Windows operating systems.

- Scripting and automation skills for your work using Powershell, Python, Bash, etc.

- Knowledge of the OWASP Application Security Verification Standard (ASVS), OWASP Testing Guide, and experience in product or feature planning.

- Understanding of browser security mechanisms (SOP, cookies, CSP, HSTS, etc.).

- Familiarity with various protocols and attacks against them (OAuth, JWT, websockets, etc.).

- Experience with public clouds (Azure, AWS, GCP).

- Experience with Pipeline Orchestrators (Jenkins, Azure DevOps, GitLab CI/CD).

- Experience in penetration testing.

Personal characteristics:

Ability to adapt to different contexts, teams, and clients.

Teamwork skills, but also a sense of autonomy.

Motivation for international projects and openness to travel.

Willingness to collaborate with other stakeholders.

Strong communication skills.

Do you think it’s you? Come join the team! At Celfocus, we are committed to fostering a diverse and inclusive work environment. As an equal opportunity employer, we welcome candidates from all backgrounds, gender identities, and abilities. We are dedicated to providing reasonable accommodations for candidates with specific needs. If you require any adjustment during the selection process, please inform our Talent Acquisition Team.

Come join the team!