Application Security Analyst

Required Skills Application Security / SSDLC

• Strong experience in Application Security and Secure Software Development Life Cycle (SSDLC), including secure design reviews, architecture assessments, and threat modeling
• Hands-on expertise in SAST, DAST, SCA, penetration testing, vulnerability scanning, and security-focused code reviews
• In-depth knowledge of OWASP Top 10 vulnerabilities and remediation best practices
• Ability to identify and remediate security flaws related to authentication, authorization, session management, encryption, and input validation
• Experience integrating automated security testing tools into CI/CD pipelines as part of DevSecOps practices
• Proficiency in reviewing and prioritizing security findings using a risk-based approach and working with development teams for remediation
• Strong understanding of application security issues across Java/JEE, .NET, JavaScript, Python, JSP, and ASP applications
• Hands-on experience securing applications in multi-cloud environments (AWS, Azure, GCP), including IAM, network segmentation, and encryption controls
• Knowledge of securing containerized and cloud-native architectures, including Docker, Kubernetes, and serverless platforms (AWS Lambda, Azure Functions)
• Experience with Infrastructure as Code (Terraform, CloudFormation) security reviews and hardening
• Familiarity with CI/CD and automation tools such as Jenkins, Azure DevOps, Ansible, Chef, and Puppet
• Experience in securing AI/LLM-based systems, including RAG pipelines, vector databases, embeddings, model-serving layers, and agentic AI architectures
• Ability to mitigate AI-related threats such as prompt injection, jailbreaks, data poisoning, model inversion/extraction, and sensitive data leakage
• Strong communication skills to articulate application security risks and recommendations to developers, architects, project managers, and senior leadership
• Analytical mindset with a strong desire to grow toward an Application Security Architect / Security Architect role