Application Security Analyst

**Make an impact** by working for sectors where technology is the enabler, everything is ground-breaking and there’s a constant need to be innovative.

**Be part of the team** that combines business knowledge, technological edge and a design experience. Our different backgrounds and know-how are key in developing solutions and experiences for digital clients.

**Face challenges** and learn other ways of thinking and seeing the world - there’s always room for your energy and creativity.

**As a part of your job, you will:
- Conducting analysis and threat modelling for new and existing Celfocus products/projects.
- Analysing and discussing requirements; interacting with all participants in the software development process.
- Conducting both manual and automated testing.
- Participating in creating and developing the company's products at all stages of its life cycle.

**What are we looking for?**
- A lively and flexible mind, clear logic, and a detail-oriented approach.
- Capability to align with teams from Analysts, Designers, Architects, and Developers to DevOps.
- Knowledge of HTTP.
- Working knowledge of programming languages
- Knowledge of the Top 10 OWASP vulnerabilities: how to find, exploit and fix them.
- Knowledge of Burp Suite or other popular web scanners like ZAP, Acunetix, Netsparker, etc.
- The desire and ability to work in a team.
- Knowledge of English at least at the level of reading technical documentation.

**Nice to have**:

- Good knowledge of Linux or Windows operating systems.
- Skills in scripting and automating your work using Powershell, Python, Bash, etc.
- Knowledge of the OWASP Application Security Verification Standard (ASVS), OWASP Testing Guide and experience in whole product or feature planning.
- An understanding of browser security mechanisms (SOP, cookies, CSP, HSTS, etc.)

We want people who like to roll up their sleeves and open their minds. Believe this is you? Come join the Team