AppSec Analyst DAST

Role: AppSec Analyst DAST Location: Remote Role Summary: The AppSec Analyst DAST is responsible for finding and remediating security vulnerabilities in MNAO s running applications. This role is a hands-on position focused on dynamic application security testing and working directly with development teams to embed security into the SDLC. Key Responsibilities:Configure, execute and maintain DAST Tools. Champions Secure by Design Methodology for MNAO and provide expert level SDLC support and guidance to developers. Conducts dynamic application security testing (DAST) for MNAO's applications. Finds and remediates vulnerabilities in MNAO's running applications. Focuses on data security vulnerabilities within applications and works with MNAO's data platform team. Creates detailed reports on DAST findings for development teams and management. Manages and tunes DAST tools and configurations. Collaborates with MNAO's development teams to integrate DAST into continuous integration/continuous delivery (CI/CD) pipelines. Provides guidance and training to development teams on secure coding practices. Ensures MNAO's applications adhere to established security policies, standards, and regulatory requirements. Qualifications:Bachelor s degree in computer science, Information Security, or a related field. Over 7 years of experience in application security, with a focus on DAST. Hands-on experience with DAST tools (e.g., OWASP ZAP, Burp Suite, commercial scanners). Experience with API security testing and authentication mechanisms (Oaith2, JWT, SSO etc.) Experience automating DSAT scans and integrating results into DevSecOps pipelines Knowledge of common web application vulnerabilities (e.g., OWASP Top 10). Proficiency in one or more programming languages. Relevant certifications such as GWEB, OSWE, or Security+