Senior Application Security Analyst | Secure DevSecOps

Bunge; Warszawa; On-site; PLN 180,000 - 300,000; Full time

Job summary

Bunge is seeking an Application Security Analyst in Warsaw to advance secure software development and protect enterprise applications globally.

You will lead core application security activities, perform SAST/DAST/IAST testing, and integrate security into SDLC and DevSecOps, collaborating with development teams to remediate vulnerabilities and strengthen security postures across the organization.

Qualifications

• Bachelor’s degree (Master’s preferred) with 6–9 years of experience in application security or cybersecurity.
• Proven expertise in secure software development and security testing practices.
• Experience with SDLC and DevSecOps integration and vulnerability management.

Responsibilities

• Manage application security initiatives and assessments independently.
• Execute core application security activities across global portfolios.
• Participate in small to medium projects to improve security processes.
• Apply in-depth knowledge to adapt plans and recommend best practices.
• Perform complex analyses to identify vulnerabilities and remediation strategies.
• Conduct SAST/DAST/SCA and manual code reviews.
• Integrate security controls into SDLC and DevSecOps pipelines.
• Provide leadership to development teams on secure coding.
• Contribute to security frameworks, tools, and processes.

Skills

Application security

OWASP Top 10

Threat modeling

Secure coding practices

CI/CD security controls

DevSecOps integration

Vulnerability assessment

Scripting languages

Education

Bachelor’s or Master’s in CS/Cybersecurity

Tools

SAST tools

DAST tools

SCA tools

IAST tools

API security testing tools

Job description

Bunge is seeking an Application Security Analyst in Warsaw to advance secure software development and protect enterprise applications globally.

You will lead core application security activities, perform SAST/DAST/IAST testing, and integrate security into SDLC and DevSecOps, collaborating with development teams to remediate vulnerabilities and strengthen security postures across the organization.