Senior Application Security Analyst

O2 Technologies,Inc; New York (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

O2 Technologies,Inc is seeking an experienced application security professional to shape and execute our security strategy across software development. You will drive DAST/SAST testing, remediation, and secure-by-design practices within CI/CD pipelines, while guiding developers on secure coding and API security testing.

The role emphasizes assessing authentication mechanisms, aligning with security standards, and leading vulnerability management for our software products and cloud services.

Qualifications

• Bachelor's degree in CS/Info Security or related field required; master's preferred.
• Proven experience in application security and secure software development.
• Strong knowledge of DAST/SAST tools and vulnerability remediation.
• Experience integrating security into CI/CD pipelines (DevSecOps).
• Ability to guide secure coding practices and compliance standards.

Responsibilities

• Develop and implement an application security strategy.
• Conduct DAST/SAST testing and coordinate remediation.
• Lead vulnerability management and mitigation efforts.
• Promote secure-by-design practices across teams.
• Provide secure coding guidance and API security testing.
• Assess authentication mechanisms (OAuth2/JWT/SSO).
• Integrate security checks into CI/CD (DevSecOps).
• Ensure compliance with security standards and regulations.

Skills

Application Security Strategy

DAST

SAST

Vulnerability Management

Secure-by-Design

Secure Coding Guidance

API Security Testing

Authentication Assessment

DevSecOps/CI/CD

Security Standards/Compliance

Education

Bachelor's Degree in Computer Science / Information Security / Cybersecurity / Computer Engineering / Software Engineering

Master's Degree in Cybersecurity / Computer Science / Information Assurance (preferred)

Tools

Burp Suite

OWASP ZAP

Commercial DAST Scanners

Checkmarx

Veracode

Jenkins

GitLab CI

Azure DevOps

Python

Bash

PowerShell

OAuth2/JWT/SSO

Postman

Job description

• Dynamic Application Security Testing (DAST)
• Static Application Security Testing (SAST)
• Vulnerability Management & Remediation
• Secure-by-Design Practices
• Secure Coding Guidance
• API Security Testing
• Authentication Mechanism Assessment
• DevSecOps & CI/CD Integration
• Security Standards & Compliance

Key Responsibilities & Skills

• Application Security Strategy
• Dynamic Application Security Testing (DAST)
• Static Application Security Testing (SAST)
• Vulnerability Management & Remediation
• Secure-by-Design Practices
• Secure Coding Guidance
• API Security Testing
• Authentication Mechanism Assessment
• DevSecOps & CI/CD Integration
• Security Standards & Compliance

Technical Skills

• Burp Suite / OWASP ZAP / Commercial DAST Scanners
• SAST Tools (Checkmarx / Veracode)
• CI/CD Platforms (Jenkins / GitLab CI / Azure DevOps)
• Python / Bash / PowerShell
• OAuth2 / JWT / SSO
• API Testing Tools (Postman)
• Security Automation Scripts

Education

Bachelor's Degree in Computer Science, Information Security, Cybersecurity, Computer Engineering, Software Engineering. Preferred: Master's in Cybersecurity, Master's in Computer Science, Master's in Information Assurance.

Industry Experience

• Application Security
• Software Development
• IT / Cloud Services

#JoinOurTeam #NowHiring #ApplyToday