Sr AppSec Analyst

Role Summary: Seeking a Senior AppSec Analyst with strong hands-on DAST/SAST and vulnerability management experience to perform dynamic security testing, identify vulnerabilities, and support development teams in integrating security into the SDLC/DevSecOps processes. Key Responsibilities: Perform DAST on web applications and APIs; identify and analyze security vulnerabilities. Configure, tune, and maintain DAST tools such as Burp Suite, OWASP ZAP, or commercial scanners. Integrate security testing into CI/CD and DevSecOps pipelines. Conduct API security testing and assess authentication mechanisms including OAuth2, JWT, and SSO. Provide detailed vulnerability reports and remediation guidance to development teams. Support Secure-by-Design practices and secure coding initiatives. Work closely with development and data platform teams to remediate application/data security issues. Ensure applications meet security standards, policies, and compliance requirements. Required Qualifications: 7+ years of Application Security experience with strong DAST expertise. Strong hands-on experience with DAST/SAST and vulnerability assessment/remediation. Expertise in OWASP Top 10 and web application security. Experience automating security scans and integrating results into DevSecOps/CI/CD pipelines. Programming/scripting experience in at least one language. Relevant certifications such as OSWE, GWEB, Security+ are a plus.