Application Security Analyst - Threat Modeling & Pentesting

Celfocus; Lisboa; Híbrido; EUR 45 000 - 65 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work

International projects

Learning opportunities

AI-driven environment

Resumo da oferta

Celfocus is seeking an Application Security Analyst to perform security assessments throughout the software development lifecycle. You will conduct threat modeling, security analysis, and penetration testing of web applications, collaborating with analysts, architects, developers, DevOps, and stakeholders to mitigate risks.

The role emphasizes hands-on testing, secure development practices, and working in a team that supports international projects with a hybrid work model.

Qualificações

• Analytical, detail-oriented mindset.
• Ability to align with Analysts, Designers, Architects, Developers, and DevOps.
• Knowledge of HTTP and web security fundamentals.
• Working knowledge of programming languages.
• Familiarity with OWASP Top 10 vulnerabilities.
• Experience with web security tools like Burp Suite or similar.
• Good command of technical English.

Responsabilidades

• Conduct threat modeling for new and existing Celfocus products/projects.
• Analyze requirements; interact with participants across the software development process.
• Penetration testing of web applications.
• Conduct both manual and automated security testing.
• Contribute to secure development across product lifecycles.

Conhecimentos

Threat modeling

Penetration testing

HTTP

Programming basics

English technical reading

Ferramentas

Burp Suite

OWASP ZAP

Netsparker

Descrição da oferta de emprego

Celfocus is seeking an Application Security Analyst to perform security assessments throughout the software development lifecycle. You will conduct threat modeling, security analysis, and penetration testing of web applications, collaborating with analysts, architects, developers, DevOps, and stakeholders to mitigate risks.

The role emphasizes hands-on testing, secure development practices, and working in a team that supports international projects with a hybrid work model.