Application Security Analyst
ZS Associates
Skills
- Penetration Testing
- Application Security
- Secure Code Review
- OWASP Top 10
- SANS Top 25
- Burp Suite Pro
- OWASP ZAP
- Snyk
- Checkmarx
- Black Duck
- Postman
- DevSecOps
- Vulnerability Assessment
About the role
What You'll Do: The Application Security Analyst in Enterprise will report to the Application Security Lead
• Typical daily work will consist of independently performing manual application penetration tests on web, mobile, APIs, and microservices across production and pre-production environments under defined testing scopes.
• Conduct secure code reviews and assist in design-level security assessments in collaboration with development and DevSecOps teams.
• Identify, validate, and document application security vulnerabilities related to OWASP Top 10, SANS Top 25, misconfigurations, and common insecure coding or design patterns.
• Provide technical guidance to junior AppSec testers, review assessment outputs, validate findings, and support skill development through peer reviews and knowledge sharing.
• Utilize industry-standard tools such as Burp Suite Pro, OWASP ZAP, Snyk, Checkmarx, Black Duck, Postman, and custom scripts to identify vulnerabilities at both runtime and source code levels.
• Ensure high-quality security testing by following established testing standards, performing peer validation of findings, and ensuring vulnerabilities are accurate, reproducible, and well-evidenced.
• Collaborate closely with developers, QA engineers, and architects to support remediation efforts and promote secure coding practices.
• Assist in providing security awareness and guidance to internal stakeholders to improve application security maturity.
• Support incident response activities by assisting in root cause analysis, vulnerability validation, and post-incident security assessments related to application security issues.
What You'll Bring:
• Bachelor’s in computer science /management of computer information/information assurance or Cybersecurity
• 0-4 years of Penetration Testing / Application Security / Offensive Security
• Must have Security Certifications: OSCP/eWPTx and OSWA/OSWE/CWES/CWEE
• Preferred Security Certifications: CRTP/CARTP, CRTE, OSEP, GRTP
• Preferred Security Cloud Certifications: AWS CLP, AWS Security Specialty
• Must be a self-starter who can learn quickly and independently.
• Fluency in English
• Client-first mentality
• Intense work ethic
• Collaborative spirit and problem-solving approach
Ready to apply?
Sign up first — takes a minute — and you get Hiro’s take on this role, a resume tailored to it, and (if available) a referral from a real employee at ZS Associates. All free with your Pro gift.
Sign up to apply