Hands-on Application Security Analyst (Onsite)

Cybersecurity Jobs; Alpharetta (GA); On-site; USD 90,000 - 150,000; Full time

Job summary

Hexaware Technologies in Alpharetta, GA seeks an Application Security Analyst to protect software through hands-on security assessments across web apps, APIs, microservices, and backend systems. You will deliver actionable reports, validate remediation, and advocate secure coding throughout the SDLC.

You will perform manual assessments, run pen tests, review code, and work with dev teams to improve security postures. Strong communication and cloud/API security experience are valued.

Qualifications

• Hands-on manual app security assessments across web apps, APIs, microservices.
• Ability to identify vulnerabilities and validate remediation.
• Experience communicating findings to technical and non-technical stakeholders.

Responsibilities

• Perform manual app security assessments across web apps, APIs, microservices, and backend systems.
• Run application penetration testing to identify vulnerabilities and exploitation opportunities.
• Conduct secure code reviews to uncover insecure practices.
• Assess architectures and recommend security improvements throughout the SDLC.
• Identify and prioritize vulnerabilities by exploitability and impact.
• Analyze findings to determine root causes and support remediation.
• Partner with development teams to deliver guidance and best practices.
• Evaluate risks in cloud-native and API-driven environments.
• Use Burp Suite, OWASP ZAP, proxies, scanners, fuzzers, and API testing platforms.
• Validate fixes through retesting and verification; build repeatable testing methodologies.
• Create security assessment reports with scope, findings, severity, and remediation recommendations.
• Present findings to technical and non-technical stakeholders and set remediation priorities.

Skills

Manual security assessments

Penetration testing

Secure code reviews

OWASP Top 10 knowledge

OWASP ASVS knowledge

Java

C#

Python

JavaScript/TypeScript

Go

Node.js

Cloud-native / API-driven security

Secure SDLC practices

Threat modeling

Excellent communication

Tools

Burp Suite

OWASP ZAP

Security Proxies

Web Application Scanners

Fuzzing tools

API testing platforms

Job description

Hexaware Technologies in Alpharetta, GA seeks an Application Security Analyst to protect software through hands-on security assessments across web apps, APIs, microservices, and backend systems. You will deliver actionable reports, validate remediation, and advocate secure coding throughout the SDLC.

You will perform manual assessments, run pen tests, review code, and work with dev teams to improve security postures. Strong communication and cloud/API security experience are valued.