Application Security Analyst

Há 5 dias

São Paulo, SP, Brasil Ubique Systems Tempo integral
Role Overview: Seeking an Application Security Analyst to assess and strengthen the security of web, API, mobile (Android/iOS), and legacy applications. Required

Skills:

- 3+ years of Application Security (AppSec) experience.
- SAST, DAST and Secure Code Review.
- Web, API and Mobile Application Security.
- OWASP Top 10, API Top 10, Mobile Top 10 and ASVS.
- Threat Modelling and Vulnerability Assessment.
- OAuth 2.0, OIDC, JWT, SAML and TLS.
- Cryptography, LGPD, PCI-DSS and ISO 27001.
- Technical English and security documentation.

Key Responsibilities

- Conduct application security assessments and code reviews.
- Identify vulnerabilities and recommend remediation.
- Perform threat modelling and application risk analysis.
- Review application architecture and security requirements.
- Validate security fixes and guide development teams.
- Promote secure coding practices and AI security guardrails. Nice to Have: AWS/Azure security, Burp Suite, Checkmarx, Fortify, Veracode, SonarQube and mobile security tools.