"Application Security Analyst"

Position Overview:

The Security Analyst is expected to perform vulnerability assessment, security analysis, penetration testing, code review of the product/modules and report the findings in defect tracking tool. It also includes but not limited to re analyze the findings and work with developers for the fixes.

Education Requirements:

• Bachelor's Degree required; Master's Degree, BSCIT, MSCIT, any IT or Computer Graduate
• Preferred CEH, OSCP or any other security related certification.

Job Functions/Responsibilities

1) Manual Testing:

• Perform threat modelling
• Perform architectural analysis
• Perform logical security assessment
• Monitor third party and internal API's, SDK and libraries are up to date.
• Generate assessment report
• Report your findings as per severity
• Participate in secure SDLC by reviewing functional and design documents.
• Perform manual and automated code reviews by using IAST, SAST and DAST tools.

2) Automation testing:

• To use automated scanning tools
• Review false positives and true positives
• Generate assessment report
• Report your findings as per severity
• Analyze reports from interactive source code review tool for false positives and include it in the report.