CYBER SECURITY ANALYST L4

Job Title: Application Security Operation

Role Summary

Experience in enterprise Application Security testing services, including SAST, SCA, Secrets Detection, and DAST. Drive secure SDLC adoption through CI/CD integration, vulnerability validation, risk-based remediation tracking, SBOM management, and security metrics reporting.

Key Responsibilities

Perform continuous and incremental application security testing using SAST, SCA, Secrets Detection, and DAST tools.

Validate findings, eliminate false positives, and support vulnerability remediation activities.

Integrate security scanning into CI/CD pipelines and enforce secure development gates.

Manage SBOM generation, open-source dependency risks, CVE tracking, and vulnerability exposure reporting.

Track remediation SLAs, TTD/TTR metrics, and application security KPIs.

Partner with development, DevSecOps, and platform engineering teams to drive remediation and continuous security improvements.

Support security assessments, tool optimization, reporting, and developer enablement initiatives.

Experience

6 years of experience in Application Security, Secure SDLC, or DevSecOps.

Hands-on experience operating enterprise AppSec scanning platforms and vulnerability management processes.

Experience integrating security testing into CI/CD pipelines and cloud-native environments.

Strong understanding of OWASP Top 10, secure coding practices, and software supply chain security.

Technical Skills & Tool Experience

SAST: Checkmarx/ Veracode/ Fortify/ SonarQube/ GitHub Advanced Security.

SCA & SBOM: Fortify/ Checkmarx / Snyk / Black Duck.

DAST & API Security: Fortify/ Checkmarx/ Burp Suite/ Invicti/ Acunetix.