Application Security Analyst — DevSecOps & Tech Controls

Abakus IT-Solutions; Namen; Hybride; EUR 60 000 - 90 000; Plein temps

Résumé du poste

Abakus IT-Solutions seeks an AISB-1052 Application Security Analyst focused on technical application security controls and DevSecOps. The role sits in a dedicated security team to replace manual controls with automated, risk-based solutions across the application lifecycle.

You will integrate SAST, DAST, SCA and secrets detection into projects and CI/CD pipelines, evaluate vulnerabilities, and define blocking gates before go-live. Hybrid work with on-site time is expected.

Qualifications

• Experience IT security in an analyst role.
• Experience integrating/operating SAST/DAST/SCA in CI/CD.
• Experience qualifying scan results and prioritising fixes.
• Experience defining quality gates before go-live.
• Experience supporting developers on vulnerabilities.
• Experience following up penetration tests/remediation.

Responsabilités

• Integrate and operate application security tools in projects and CI/CD pipelines.
• Analyse and qualify vulnerabilities: exploitability, impact, false positives and fix prioritisation.
• Define and configure blocking criteria before go-live.
• Contribute to automation of controls in CI/CD pipelines.
• Assess security of application architecture: data flows, auth, encryption, APIs, dependencies.
• Report findings in a technical, documented form.
• Follow up on penetration tests and remediation plans.
• Advise project, development, architecture and operations teams.

Connaissances

Exploitability analysis

Threat prioritisation

DevSecOps

Technical reporting

OWASP Top 10

Secure development

Outils

SAST

DAST

SCA

Secrets detection

Vulnerability scans

Description du poste

Abakus IT-Solutions seeks an AISB-1052 Application Security Analyst focused on technical application security controls and DevSecOps. The role sits in a dedicated security team to replace manual controls with automated, risk-based solutions across the application lifecycle.

You will integrate SAST, DAST, SCA and secrets detection into projects and CI/CD pipelines, evaluate vulnerabilities, and define blocking gates before go-live. Hybrid work with on-site time is expected.