Application Security Trainee

About the role

As an Application Security Trainee, you will assist the security team in identifying, analyzing, and mitigating security vulnerabilities in software applications. Your duties may include supporting secure code reviews, participating in penetration testing, researching common threats, and helping implement security best practices across the development lifecycle.

Key responsibilities

• Conduct analysis and threat modeling for new and existing Celfocus products/projects.
• Analyze and discuss requirements while interacting with all participants in the software development process.
• Perform penetration testing of web applications.
• Execute both manual and automated security testing.
• Participate in the creation and development of company products at all stages of their life cycle.

Required profile

• Less than 1 year of IT experience (Celfocus Academy opportunity).
• Eagerness to learn with a detail‑oriented mindset.
• Knowledge of HTTP and programming languages.
• Familiarity with the OWASP Top 10 vulnerabilities and how to find, exploit and fix them.
• Ability to work in a team and read technical documentation in English.

Required skills

• Linux or Windows operating systems.
• Scripting with PowerShell, Python, Bash, etc.
• SAST tools such as SonarQube or Fortify.
• SCA tools like Dependency‑Check or WhiteSource.
• DAST tools including ZAP or Burp.
• Defect Dojo.
• Programming languages: Java, PHP, Python, C.
• CI/CD pipelines: Jenkins, GitLab CI/CD, Azure DevOps.

What we offer

• Full‑time permanent contract providing stability.
• Comprehensive training and mentoring program through Celfocus Academy.
• Career growth opportunities with internal promotion pathways.
• Collaborative work environment where ideas are valued.
• Hybrid work regime and flexible working hours for work‑life balance.