Information Security Analyst III – AppSec
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Information Security Analyst evaluating vulnerabilities in applications and APIs. Supporting squads in secure development and continuous improvement of security practices.
Responsibilities:
- Assess vulnerabilities in applications, APIs, libraries, components, and pipelines.
- Support squads in remediating vulnerabilities and adopting secure development practices.
- Operate and enhance SAST, DAST, and SCA tools, API security solutions, and bot protection.
- Support vulnerability management by prioritizing risks based on criticality and exposure.
- Perform technical risk analyses of applications, integrations, and digital user journeys.
- Contribute to secure development standards, technical guides, checklists, and training.
- Support automation, shift-left initiatives, and continuous security improvements across the SDLC.
Requirements:
- Experience in AppSec, DevSecOps, secure development, or vulnerability analysis.
- Knowledge of OWASP Top 10, API security, and authentication and authorization fundamentals.
- Experience with static application security testing (SAST), software composition analysis (SCA), and dynamic application security testing (DAST) tools.
- Ability to interpret vulnerabilities and provide practical remediation guidance.
- Understanding of API security (e.g., OAuth2, JWT) and abuse/anti-automation protection.
- Familiarity with cloud environments, containers, CI/CD pipelines, and/or Infrastructure as Code (IaC).
- Preferred: Certifications or courses in security, development, or cloud.
Benefits:
- Medical insurance
- Dental insurance
- Renascer Program – personal renewal and well‑being program
- Observance of significant dates – we value meaningful moments
- Investment in education – support for your learning and development
- Profit sharing (Results Participation) – we build together and celebrate results
- Individual development plan – we value your career ownership
- Private pension plan – planning for the future
- Life insurance
- Team events/time together
- Meal and/or food allowance
- Commuter allowance (no payroll deductions)
- Childcare/babysitting assistance – to help ensure your child is cared for in a safe, welcoming place.
Similar Jobs
Information Security Analyst III – Cyber Risk Management
Information Security Analyst III focusing on Cyber Risk Management. Engage in risk identification, tracking, and regulatory compliance for Central Ailos.
Information Security Analyst III – Offensive Security
Red Team activities for a cybersecurity specialist at Central Ailos. Focus on security, collaboration, and extensive opportunity in a cooperative financial environment.
Senior Security Analyst
Senior Security Analyst at OutSystems focusing on incident response, threat intelligence, and threat hunting. Leading investigations and enhancing security operations in a global 24/7 SOC environment.
Consulting Analyst – Security Advisory
Business Consultant in Security Advisory at Frost & Sullivan, supporting cybersecurity and ICT markets. Analyzing emerging technologies and leading consulting projects with client engagement.
Senior Director Analyst – Application Security, Governance
Senior Director Analyst managing application security strategies and insights for Gartner. Creating thought leadership content and engaging with clients while supporting sales initiatives.
Security Analyst
Manage and ensure secure production and development environments as a Security Analyst. Analyze incidents, maintain security systems, and collaborate with teams and vendors.
Senior ITS Security Compliance Analyst
Senior IT Security Compliance Analyst supporting technology compliance programs and collaborating with stakeholders at Primax. Maintaining IT security standards and facilitating technology audits across the company.
Senior Business Analyst – Security Specialist
Senior Business Analyst - RBAC Security Specialist responsible for designing role-based access control solutions at Gainwell. Collaborating with stakeholders to ensure secure access and compliance across systems.
Security Analyst II
Applications Security Analyst managing Epic application access provisioning in a high-volume hospital environment. Collaborating on IAM/IGA automation and ensuring audit-ready documentation.
Cybersecurity Analyst
Cybersecurity Analyst responsible for incident response and forensic analysis at Agile Defense. Emphasizing security monitoring and triage within a fully remote Cyber Defense team.
L2 Security Analyst
L2 Security Analyst responsible for higher-severity incident investigations at Accesa. Collaborating with teams to validate suspicious activity and propose improvements in security processes.
Security Analyst, Oracle
Oracle Security Architect researching threats and vulnerabilities for Rimini Protect! Security Services team. Conducting Security Audits and providing support for ERP solutions and Database environments.
Vulnerability Analyst Mid – SBOM, Supply Chain Risk Management Specialist
Information Vulnerability Analyst focusing on cybersecurity challenges for federal customers. Involves SBOM review, security implementation, and technical problem resolution.
Cyber Security Analyst – US Time Zone
Cyber Security Analyst focusing on real-time threat detection and assisting clients in bot mitigation. Collaborating with customers and teams to enhance security measures against online threats.
Cybersecurity Analyst Intern
Cybersecurity Analyst Intern at The Media Trust assisting in web activity analysis and malware detection. Joining the Digital Security and Operations team to gain hands-on experience in cybersecurity.
Cybersecurity Analyst
Analista de Cibersegurança responsável por avaliações de risco e gestão de segurança da informação em modelo remoto. Atuação em governança, risco e compliance com equipes internas e externas.
Security Analyst
Security Analyst responsible for integrating security tools and ensuring compliance in dementia care tech. Working closely with cross-functional teams to enhance security posture and incident response.
Analista de Segurança da Informação
Information Security Analyst responsible for protecting the company's digital assets with a focus on security compliance and incident response.
Principal Cybersecurity Analyst
Principal Cybersecurity Analyst at Northrop Grumman developing, maintaining, and automating policy solutions using emerging technologies. Collaborating with teams to ensure cybersecurity compliance and streamline processes.
Cyber Security Analyst
Cyber Security Analyst with a focus on protecting systems and ensuring federal compliance for a technology company. Handling incidents, risks, and security measures in a federal contract environment.