Application Security Analyst — Hybrid, Global Projects

Celfocus; Porto; Híbrido; EUR 42 000 - 62 000; Tempo integral

Resumo da oferta

Celfocus is looking for Application Security Analysts to join our team. The role involves performing security assessments throughout the software development lifecycle, including threat modeling, security analysis, and penetration testing of web applications.

You will work with analysts, architects, developers and DevOps to identify and mitigate risks, conduct both manual and automated testing, and contribute to secure development across Celfocus products and projects.

Qualificações

• Experience performing threat modeling and security assessments across the software development lifecycle.
• Knowledge of HTTP and web security testing approaches.
• Familiarity with OWASP ASVS and OWASP Testing Guide.
• Proficiency in manual and automated testing of web applications.
• Ability to collaborate with Analysts, Designers, Architects, Developers and DevOps.

Responsabilidades

• Perform threat modeling for new and existing products and projects.
• Analyze requirements and interact with stakeholders in the SDLC.
• Conduct penetration testing of web applications.
• Perform both manual and automated security tests.
• Contribute to secure development across products and projects.

Conhecimentos

Threat modeling

Penetration testing

Web security analysis

Team collaboration

English reading technical docs

Attention to detail

Scripting basics

Ferramentas

Burp Suite

ZAP

Acunetix

Netsparker

Jenkins

Azure DevOps

GitLab CI/CD

Descrição da oferta de emprego

Celfocus is looking for Application Security Analysts to join our team. The role involves performing security assessments throughout the software development lifecycle, including threat modeling, security analysis, and penetration testing of web applications.

You will work with analysts, architects, developers and DevOps to identify and mitigate risks, conduct both manual and automated testing, and contribute to secure development across Celfocus products and projects.