Application Security Analyst

About the role

Celfocus is looking for an Application Security Analyst to join its multidisciplinary teams. You will help secure the software development lifecycle by performing threat modeling, security analysis and penetration testing of web applications.

Key responsibilities

• Conduct threat modeling and security analysis for new and existing products.
• Perform manual and automated penetration testing of web applications using tools such as Burp Suite, ZAP, Acunetix or Netsparker.
• Collaborate with analysts, architects, developers and DevOps to identify and mitigate security risks.
• Participate in product development across all lifecycle stages, ensuring security is built in.

Required profile

• Detail‑oriented mindset with strong logical reasoning.
• Ability to work with cross‑functional teams including analysts, designers, architects, developers and DevOps.
• Good English reading skills for technical documentation.
• Motivation to grow in application security and work on international projects.

Required skills

• Knowledge of HTTP and common web protocols.
• Familiarity with the OWASP Top 10 vulnerabilities and how to find, exploit and fix them.
• Experience with web security scanners (Burp Suite, ZAP, Acunetix, Netsparker).
• Scripting/automation using PowerShell, Python or Bash.
• Understanding of browser security mechanisms (SOP, cookies, CSP, HSTS).
• Knowledge of OAuth, JWT and WebSockets.
• Experience with public cloud platforms (Azure, AWS, GCP) and CI/CD pipelines (Jenkins, Azure DevOps, GitLab CI/CD).

What we offer

• Hybrid working model with flexibility.
• Opportunities to work on international projects and explore different career paths.
• Continuous learning in an AI‑driven environment.
• Benefits and perks to support day‑to‑day life.