{"schemaVersion":"jobsearcher.job.v1","id":"de17b8b7bb4175e5130d64ef","url":"https://jobsearcher.com/jobs/de17b8b7bb4175e5130d64ef","canonicalUrl":"https://jobsearcher.com/jobs/de17b8b7bb4175e5130d64ef","title":"Application Security Analyst","description":"Location: Alpharetta, Georgia\nType of Hire: Full-Time / W2\nCompany: Hexaware Technologies\n\nPosition Overview\n\nHexaware Technologies is seeking a highly skilled Application Security Analyst to join our cybersecurity team. This role is responsible for identifying, analyzing, and mitigating application security risks through comprehensive security assessments, penetration testing, secure code reviews, and vulnerability management activities.\n\nThe ideal candidate will possess strong expertise in application security testing methodologies, secure software development practices, vulnerability assessment techniques, and risk analysis. This individual will work closely with development, architecture, and engineering teams to strengthen the organization's security posture and promote secure-by-design principles across the software development lifecycle.\n\nKey Responsibilities\nApplication Security Assessments\nPerform comprehensive manual application security assessments across web applications, APIs, microservices, and backend systems.\nConduct application penetration testing to identify security vulnerabilities, attack vectors, and exploitation opportunities.\nExecute secure code reviews to identify insecure coding practices and validate adherence to security standards.\nAssess application architectures and recommend security enhancements throughout the Software Development Lifecycle (SDLC).\nVulnerability Identification & Risk Analysis\nIdentify, validate, and prioritize security vulnerabilities based on exploitability, business impact, and potential risk.\nAnalyze application security findings and determine root causes.\nPartner with development teams to provide remediation guidance and security best practices.\nEvaluate risks within modern application architectures, including cloud-native and API-driven environments.\nSecurity Testing & Validation\nUtilize industry-standard security testing tools, including:\nBurp Suite\nOWASP ZAP\nSecurity Proxies\nWeb Application Scanners\nFuzzing Tools\nAPI Testing Platforms\nValidate remediation efforts through re-testing and verification activities.\nDevelop repeatable testing methodologies and security assessment procedures.\nReporting & Communication\nProduce detailed and professional security assessment reports that include:\nTesting scope and methodology\nTechnical findings and supporting evidence\nVulnerability severity ratings\nRoot cause analysis\nBusiness impact assessment\nPractical remediation recommendations\nPresent security findings to both technical and non-technical stakeholders.\nClearly communicate security risks and remediation priorities to development and leadership teams.\nRequired Qualifications\nApplication Security Expertise\nStrong experience performing manual application security assessments and penetration testing.\nDeep understanding of common application security vulnerabilities and attack techniques.\nHands-on experience identifying and exploiting application security weaknesses in web applications, APIs, and backend services.\nStrong understanding of secure design principles and secure development practices.\nSecure Code Review\nProven experience conducting manual source code reviews.\nAbility to identify insecure coding practices and provide guidance on secure coding standards.\nExperience reviewing code in one or more programming languages such as:\nJava\nC#\nPython\nJavaScript/TypeScript\nGo\nNode.js\nSecurity Frameworks & Standards\nStrong knowledge of:\nOWASP Top 10\nOWASP ASVS\nSecure Coding Best Practices\nApplication Security Testing Methodologies\nIndustry Security Controls and Frameworks\nUnderstanding of authentication, authorization, session management, encryption, and API security principles.\nRisk Management & Communication\nExperience assessing vulnerability severity using industry-standard methodologies.\nStrong analytical and problem-solving skills.\nExcellent written and verbal communication skills.\nAbility to communicate effectively with developers, architects, project teams, and executive stakeholders.\nPreferred Qualifications\nPrevious software development experience.\nFamiliarity with modern application architectures, including:\nMicroservices\nREST APIs\nCloud-Native Applications\nContainerized Environments\nDevSecOps Practices\nExperience working in Agile development environments.\nExposure to CI/CD security testing and automation.\nIndustry certifications such as:\nGWAPT\nGPEN\nOSCP\nCSSLP\nCISSP\nCEH","company":"Hexaware Technologies","rawCompany":"hexaware technologies","city":"Denver","state":"CO","isRemote":false,"isActive":false,"createdAt":"2026-11-06T10:44:24.239Z","occupations":[{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"},{"code":"15-1299.04","title":"Penetration Testers","slug":"penetration-testers"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Application Security Analyst","description":"Location: Alpharetta, Georgia\nType of Hire: Full-Time / W2\nCompany: Hexaware Technologies\n\nPosition Overview\n\nHexaware Technologies is seeking a highly skilled Application Security Analyst to join our cybersecurity team. This role is responsible for identifying, analyzing, and mitigating application security risks through comprehensive security assessments, penetration testing, secure code reviews, and vulnerability management activities.\n\nThe ideal candidate will possess strong expertise in application security testing methodologies, secure software development practices, vulnerability assessment techniques, and risk analysis. This individual will work closely with development, architecture, and engineering teams to strengthen the organization's security posture and promote secure-by-design principles across the software development lifecycle.\n\nKey Responsibilities\nApplication Security Assessments\nPerform comprehensive manual application security assessments across web applications, APIs, microservices, and backend systems.\nConduct application penetration testing to identify security vulnerabilities, attack vectors, and exploitation opportunities.\nExecute secure code reviews to identify insecure coding practices and validate adherence to security standards.\nAssess application architectures and recommend security enhancements throughout the Software Development Lifecycle (SDLC).\nVulnerability Identification & Risk Analysis\nIdentify, validate, and prioritize security vulnerabilities based on exploitability, business impact, and potential risk.\nAnalyze application security findings and determine root causes.\nPartner with development teams to provide remediation guidance and security best practices.\nEvaluate risks within modern application architectures, including cloud-native and API-driven environments.\nSecurity Testing & Validation\nUtilize industry-standard security testing tools, including:\nBurp Suite\nOWASP ZAP\nSecurity Proxies\nWeb Application Scanners\nFuzzing Tools\nAPI Testing Platforms\nValidate remediation efforts through re-testing and verification activities.\nDevelop repeatable testing methodologies and security assessment procedures.\nReporting & Communication\nProduce detailed and professional security assessment reports that include:\nTesting scope and methodology\nTechnical findings and supporting evidence\nVulnerability severity ratings\nRoot cause analysis\nBusiness impact assessment\nPractical remediation recommendations\nPresent security findings to both technical and non-technical stakeholders.\nClearly communicate security risks and remediation priorities to development and leadership teams.\nRequired Qualifications\nApplication Security Expertise\nStrong experience performing manual application security assessments and penetration testing.\nDeep understanding of common application security vulnerabilities and attack techniques.\nHands-on experience identifying and exploiting application security weaknesses in web applications, APIs, and backend services.\nStrong understanding of secure design principles and secure development practices.\nSecure Code Review\nProven experience conducting manual source code reviews.\nAbility to identify insecure coding practices and provide guidance on secure coding standards.\nExperience reviewing code in one or more programming languages such as:\nJava\nC#\nPython\nJavaScript/TypeScript\nGo\nNode.js\nSecurity Frameworks & Standards\nStrong knowledge of:\nOWASP Top 10\nOWASP ASVS\nSecure Coding Best Practices\nApplication Security Testing Methodologies\nIndustry Security Controls and Frameworks\nUnderstanding of authentication, authorization, session management, encryption, and API security principles.\nRisk Management & Communication\nExperience assessing vulnerability severity using industry-standard methodologies.\nStrong analytical and problem-solving skills.\nExcellent written and verbal communication skills.\nAbility to communicate effectively with developers, architects, project teams, and executive stakeholders.\nPreferred Qualifications\nPrevious software development experience.\nFamiliarity with modern application architectures, including:\nMicroservices\nREST APIs\nCloud-Native Applications\nContainerized Environments\nDevSecOps Practices\nExperience working in Agile development environments.\nExposure to CI/CD security testing and automation.\nIndustry certifications such as:\nGWAPT\nGPEN\nOSCP\nCSSLP\nCISSP\nCEH","datePosted":"2026-11-06T10:44:24.239Z","dateModified":"2026-11-06T10:44:24.239Z","hiringOrganization":{"@type":"Organization","name":"Hexaware Technologies","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Denver","addressRegion":"CO","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"de17b8b7bb4175e5130d64ef"},"url":"https://jobsearcher.com/jobs/de17b8b7bb4175e5130d64ef"}}