Application Security Analyst

Celfocus; Porto; Híbrido; EUR 42 000 - 62 000; Tempo integral

Resumo da oferta

Celfocus is looking for Application Security Analysts to join our team. The role involves performing security assessments throughout the software development lifecycle, including threat modeling, security analysis, and penetration testing of web applications.

You will work with analysts, architects, developers and DevOps to identify and mitigate risks, conduct both manual and automated testing, and contribute to secure development across Celfocus products and projects.

Qualificações

• Experience performing threat modeling and security assessments across the software development lifecycle.
• Knowledge of HTTP and web security testing approaches.
• Familiarity with OWASP ASVS and OWASP Testing Guide.
• Proficiency in manual and automated testing of web applications.
• Ability to collaborate with Analysts, Designers, Architects, Developers and DevOps.

Responsabilidades

• Perform threat modeling for new and existing products and projects.
• Analyze requirements and interact with stakeholders in the SDLC.
• Conduct penetration testing of web applications.
• Perform both manual and automated security tests.
• Contribute to secure development across products and projects.

Conhecimentos

Threat modeling

Penetration testing

Web security analysis

Team collaboration

English reading technical docs

Attention to detail

Scripting basics

Ferramentas

Burp Suite

ZAP

Acunetix

Netsparker

Jenkins

Azure DevOps

GitLab CI/CD

Descrição da oferta de emprego

Make an impact by working in sectors where technology is the enabler and innovation is the key.

At Celfocus, we make data actionable through Next‑Gen Intelligence - where data, AI and human creativity come together.

You’ll work with multidisciplinary teams and partner with leading companies to turn data into decisions, agility and long‑term value.

Explore your way in.

The opportunity:

We are looking for Application Security Analysts to join our Celfocus team. The role involves performing application security assessments throughout the software development lifecycle, including threat modeling, security analysis, and penetration testing of web applications. You will work closely with analysts, architects, developers, DevOps teams, and other stakeholders to identify and mitigate security risks, conduct manual and automated security testing, and contribute to the secure development of Celfocus products and projects.

Your day-to-day:

• Conducting analysis and threat modeling for new and existing Celfocus products/projects.
• Analyzing and discussing requirements; interacting with all participants in the software development process.
• Penetration testing web applications.
• Conducting both manual and automated testing.
• Participating in the creation and development of the company's products at all stages of their life cycle.

What you'll bring:

• A lively and flexible mind, clear logic, a detail-oriented approach.
• Capability to align with teams from Analysts, Designers, Architects, Developers to DevOps.
• Knowledge of HTTP.
• Working knowledge of programming languages.
• Knowledge of the Top 10 OWASP vulnerabilities: how to find, exploit and fix them.
• Knowledge of Burp Suite or other popular web scanners like ZAP, Acunetix, Netsparker, etc.
• The desire and ability to work in a team.
• The desire to develop yourself in the field of application security.
• Knowledge of English at least at the level of reading technical documentation.

Additional qualifications:

• Good knowledge of Linux or Windows operating systems.
• Skills in scripting and automating your work using Powershell, Python, Bash, etc.
• Knowledge of the OWASP Application Security Verification Standard (ASVS) , OWASP Testing Guide and experience in whole product or feature planning.
• An understanding of browser security mechanisms (SOP, cookies, CSP, HSTS, etc.)
• Familiarity with various protocols and attacks against them (OAuth, JWT, websockets, etc.)
• Experience with public clouds (Azure, AWS, GCP)
• Experience with pipeline Orchestrators (Jenkins, Azure DevOps, GitLab CI/CD)
• Penetration testing experience

Personal Traits:

• Ability to adapt to different contexts, teams and Clients
• Teamwork skills but also sense of autonomy
• Motivation for international projects and ok if travel is included
• Willingness to collaborate with other players
• Strong communication skills

What’s in it for you:

• Hybrid way of working with flexibility and balance
• Opportunity to work on international projects
• Possibility to explore different roles and career paths
• Continuous learning and development opportunities
• A growing AI‑driven environment, working with the latest technologies
• A set of benefits and perks to support your day-to-day

A place for everyone

At Celfocus, we are committed to cultivate a diverse and inclusive workplace. As an equal‑opportunity employer, we welcome applicants of all backgrounds, gender identities, and abilities.

If you require any adjustments during the selection process, please inform our Talent Acquisition Team.

Celfocus is pioneering the future of business through Next-Gen Intelligence - the convergence of data, AI, and human creativity to build more autonomous and adaptive organisations.

Guided by our core belief - Making Data Actionable - we partner with leading companies to co‑create intelligent solutions that turn data into insight, agility, and business value.

Operating in over 25 countries, we bring together business experts, data scientists, and AI engineers to turn complexity into clarity and vision into measurable impact.

Founded in 2000, Celfocus is part of Novabase, listed on Euronext Lisbon.

To know more, visit www.celfocus.com