Application Security Analyst
Há 5 dias
São Paulo, SP, Brasil
Ubique Systems
Tempo integral
Grátis com e-mail ou Google
Salve esta vaga e mantenha sua pesquisa organizada
Crie uma conta gratuita para salvar vagas, criar alertas e retornar a esta listagem a partir do seu painel.
Grátis com e-mail ou Google
Ao continuar, você concorda com nossos Termos & Política de Privacidade.
Role Overview:
Seeking an Application Security Analyst to assess and strengthen the security of web, API, mobile (Android/iOS), and legacy applications.
Required
Skills:
- 3+ years of Application Security (AppSec) experience.
- SAST, DAST and Secure Code Review.
- Web, API and Mobile Application Security.
- OWASP Top 10, API Top 10, Mobile Top 10 and ASVS.
- Threat Modelling and Vulnerability Assessment.
- OAuth 2.0, OIDC, JWT, SAML and TLS.
- Cryptography, LGPD, PCI-DSS and ISO 27001.
- Technical English and security documentation.
Key Responsibilities
- Conduct application security assessments and code reviews.
- Identify vulnerabilities and recommend remediation.
- Perform threat modelling and application risk analysis.
- Review application architecture and security requirements.
- Validate security fixes and guide development teams.
- Promote secure coding practices and AI security guardrails. Nice to Have: AWS/Azure security, Burp Suite, Checkmarx, Fortify, Veracode, SonarQube and mobile security tools.
Skills:
- 3+ years of Application Security (AppSec) experience.
- SAST, DAST and Secure Code Review.
- Web, API and Mobile Application Security.
- OWASP Top 10, API Top 10, Mobile Top 10 and ASVS.
- Threat Modelling and Vulnerability Assessment.
- OAuth 2.0, OIDC, JWT, SAML and TLS.
- Cryptography, LGPD, PCI-DSS and ISO 27001.
- Technical English and security documentation.
Key Responsibilities
- Conduct application security assessments and code reviews.
- Identify vulnerabilities and recommend remediation.
- Perform threat modelling and application risk analysis.
- Review application architecture and security requirements.
- Validate security fixes and guide development teams.
- Promote secure coding practices and AI security guardrails. Nice to Have: AWS/Azure security, Burp Suite, Checkmarx, Fortify, Veracode, SonarQube and mobile security tools.