Senior Application Security Analyst

The Senior Application Security Analyst conducts in-depth security assessments, identifies vulnerabilities, and implements security controls to protect applications from potential threats. The role involves analysing application code, performing security testing, and collaborating with development teams to remediate security issues. The postholder plays a key role in enhancing the security posture of applications and ensuring compliance with relevant security standards and regulations, working closely with development teams, architects, IT operations, and security stakeholders.

• Conduct comprehensive security assessments, code reviews, and penetration testing of applications to identify potential vulnerabilities and security risks, using industry-standard tools and methodologies and providing actionable recommendations for remediation.
• Identify, prioritise, and track security vulnerabilities found during security assessments, working closely with development teams to facilitate timely remediation and monitoring the effectiveness of remediation efforts.
• Manage and maintain the security tools and technologies used for application security testing and monitoring, configuring, deploying, and optimising static code analysis (SAST), dynamic application security testing (DAST), and web application firewalls (WAFs).
• Provide support during security incidents related to applications, including incident detection, analysis, and response, and collaborate with incident response teams to investigate incidents and identify root causes.
• Promote a culture of security awareness among development teams and stakeholders through training sessions, workshops, and awareness campaigns covering secure coding practices, threat mitigation techniques, and compliance requirements.
• Maintain detailed documentation of security assessments, findings, and remediation efforts, and generate regular reports and metrics on application security activities, vulnerabilities, and compliance status for stakeholders and management.
• Collaborate closely with development teams, architects, IT operations, and security stakeholders to integrate security into the software development lifecycle, articulating security risks, requirements, and recommendations clearly and concisely.
• Identify opportunities for process improvement, optimisation, and automation in application security practices, and stay abreast of emerging threats, vulnerabilities, and security trends to recommend appropriate risk mitigation measures.

• Software development background.
• At least five years' experience in a similar information security position.
• Customer-oriented, with the ability to educate and influence a technical audience on application security matters.
• Fluency in relevant development languages (Java, C/C++, Perl, PHP,.NET, Python and similar).
• Experience in security test management.
• Experience in application security assessments.
• Experience in security assurance.
• Experience in requirements management.
• Knowledge of major frameworks and support libraries (SPRING, OSGI, ASP.NET, etc.).
• Experience in agile development.
• Experience in vulnerability management.
• Experience in continuous improvements.
• Experience in penetration testing.
• Experience in security evaluation and functional testing.
• Experience in application security testing.

• Safe home pickup and home drop.
• A regular bonus and great pension.
• 24 days annual leave.
• Extra paid leave, including wellbeing and development days.
• Life assurance and income protection.
• Private healthcare and wellbeing support.
• INR 3,000 per month communication allowance.
• Up to INR 16,000 per year in crèche expenses (children under 3).