Senior Application Security Analyst

🔵 Reach IT – Nearshore Solution!

Our nearshore expertise sets us apart. We specialize in placing high-caliber professionals into complex international technology environments, supporting global organizations developing advanced, business-critical technology products.

We are looking for an App Security Researcher | Code Analysis & Vulnerability Detection 🛡️

To join the Security Research Group of a global Application Security product company, contributing directly to the research that powers and improves enterprise Application Security Testing solutions.

This is not a generic Cybersecurity, SOC, GRC or infrastructure security position. We are looking for someone who understands vulnerabilities at source-code level and can reason about how they appear, how they can be detected and how developers can mitigate them.

We are open to experienced Application Security Analysts looking to deepen their path into hands-on security research, as well as established Security Researchers with experience working autonomously on complex technical problems.

You will investigate how vulnerabilities manifest across different programming languages, frameworks and emerging technologies, translating that knowledge into improved detection capabilities across SAST and other Application Security products.

Skills

🎯 3+ years of professional experience as an Application Security Analyst, Security Researcher, Web Application Penetration Tester, Secure Software Developer or Secure Code Reviewer;

🎯 Secure code review and evaluating findings generated by Application Security tools;

🎯 Security concepts, software vulnerabilities, mitigations and secure coding practices;

🎯 OWASP Top 10 or similar vulnerability classifications;

🎯 Analyze and reason about source code containing different types of vulnerabilities;

🎯 Compiled and interpreted programming languages;

🎯 Python or another scripting/programming language for analysis or automation;

🎯 Software development practices, programming concepts and application architectures;

🎯 Security research, bug bounty or penetration testing;

Your Responsibilities

✅ Research vulnerabilities across multiple programming languages, frameworks and technologies;

✅ Perform secure code reviews and evaluate results generated by Application Security Testing solutions;

✅ Analyze findings, including potential false positives, detection gaps and opportunities to improve security coverage;

✅ Contribute to designing, refining and validating vulnerability detection logic and rules;

✅ Propose technically grounded improvements to SAST and other AppSec capabilities;

✅ Develop scripts and internal tools to support security analysis, research and automation;

✅ Investigate Application Security, AI Security and emerging technology risks;

✅ Support developers and internal stakeholders in understanding vulnerabilities and their mitigations;

✅ Document research findings and communicate conclusions clearly;

✅ Share technical knowledge and collaborate with other members of the Security Research Group.

#ApplicationSecurity #AppSec #SecurityResearch #SecurityResearcher #ApplicationSecurityAnalyst #VulnerabilityResearch #SecureCodeReview #CodeSecurity #SAST #VulnerabilityDetection #OWASP #SecureCoding #PenetrationTesting #Python #ReachIT