Note: The job is a remote job and is open to candidates in USA. Reqroute, Inc is seeking a Senior Application Security Analyst to identify, assess, and remediate vulnerabilities in running applications. The role focuses on hands-on Dynamic Application Security Testing (DAST), integrating security testing into DevSecOps and CI/CD pipelines, and partnering with development teams to strengthen secure coding practices and compliance.
Responsibilities
- Configure, execute, maintain, and optimize DAST tools and scanning processes
- Champion Secure by Design methodologies and provide expert application security guidance throughout the SDLC
- Conduct dynamic application security testing across MNAO applications
- Identify, analyze, and support remediation of vulnerabilities in running applications
- Assess data security vulnerabilities and collaborate with the data platform team on remediation
- Generate detailed DAST vulnerability reports for development teams and management
- Manage, tune, and optimize DAST tools, configurations, and scanning policies
- Integrate DAST testing and results into CI/CD and DevSecOps pipelines
- Work closely with development teams to improve application security and secure coding practices
- Provide security guidance, training, and recommendations to development teams
- Ensure applications comply with established security policies, standards, and regulatory requirements
Skills
- • Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field
- • 7+ years of experience in Application Security, with strong hands-on DAST experience
- • Hands-on experience with DAST tools such as OWASP ZAP, Burp Suite, or commercial DAST scanners
- • Strong experience with API security testing and authentication mechanisms such as OAuth 2.0, JWT, and SSO
- • Experience automating DAST scans and integrating security testing into DevSecOps/CI/CD pipelines
- • Strong knowledge of common web application vulnerabilities, including the OWASP Top 10
- • Proficiency in at least one programming or scripting language
- • Strong understanding of secure SDLC practices and application security methodologies
- • GIAC Web Application Penetration Tester (GWAPT/GWEB)
- • OSWE
- • Security+
- • Other relevant application security or penetration testing certifications
Benefits
- Remote work arrangement
Company Overview