Performs application security assessments, penetration testing, secure code reviews, vulnerability analysis, and remediation validation across web applications, APIs, microservices, and backend systems. Produces detailed security reports, prioritizes risks, recommends mitigations, and communicates findings to technical and executive stakeholders. The role supports secure-by-design practices throughout the SDLC and evaluates modern cloud-native, containerized, and DevSecOps environments.
Location: Alpharetta, Georgia
Type of Hire: Full-Time / W2
Company: Hexaware Technologies
Hexaware Technologies is seeking a highly skilled Application Security Analyst to join our cybersecurity team. This role is responsible for identifying, analyzing, and mitigating application security risks through comprehensive security assessments, penetration testing, secure code reviews, and vulnerability management activities.
The ideal candidate will possess strong expertise in application security testing methodologies, secure software development practices, vulnerability assessment techniques, and risk analysis. This individual will work closely with development, architecture, and engineering teams to strengthen the organization's security posture and promote secure-by-design principles across the software development lifecycle.
Key ResponsibilitiesApplication Security Assessments- Perform comprehensive manual application security assessments across web applications, APIs, microservices, and backend systems.
- Conduct application penetration testing to identify security vulnerabilities, attack vectors, and exploitation opportunities.
- Execute secure code reviews to identify insecure coding practices and validate adherence to security standards.
- Assess application architectures and recommend security enhancements throughout the Software Development Lifecycle (SDLC).
- Identify, validate, and prioritize security vulnerabilities based on exploitability, business impact, and potential risk.
- Analyze application security findings and determine root causes.
- Partner with development teams to provide remediation guidance and security best practices.
- Evaluate risks within modern application architectures, including cloud-native and API-driven environments.
- Utilize industry-standard security testing tools, including:
- Burp Suite
- OWASP ZAP
- Security Proxies
- Web Application Scanners
- Fuzzing Tools
- API Testing Platforms
- Validate remediation efforts through re-testing and verification activities.
- Develop repeatable testing methodologies and security assessment procedures.
- Produce detailed and professional security assessment reports that include:
- Testing scope and methodology
- Technical findings and supporting evidence
- Vulnerability severity ratings
- Root cause analysis
- Business impact assessment
- Practical remediation recommendations
- Present security findings to both technical and non-technical stakeholders.
- Clearly communicate security risks and remediation priorities to development and leadership teams.
- Strong experience performing manual application security assessments and penetration testing.
- Deep understanding of common application security vulnerabilities and attack techniques.
- Hands-on experience identifying and exploiting application security weaknesses in web applications, APIs, and backend services.
- Strong understanding of secure design principles and secure development practices.
- Proven experience conducting manual source code reviews.
- Ability to identify insecure coding practices and provide guidance on secure coding standards.
- Experience reviewing code in one or more programming languages such as:
- Java
- C#
- Python
- JavaScript/TypeScript
- Go
- Node.js
- Strong knowledge of:
- OWASP Top 10
- OWASP ASVS
- Secure Coding Best Practices
- Application Security Testing Methodologies
- Industry Security Controls and Frameworks
- Understanding of authentication, authorization, session management, encryption, and API security principles.
- Experience assessing vulnerability severity using industry-standard methodologies.
- Strong analytical and problem-solving skills.
- Excellent written and verbal communication skills.
- Ability to communicate effectively with developers, architects, project teams, and executive stakeholders.
- Previous software development experience.
- Familiarity with modern application architectures, including:
- Microservices
- REST APIs
- Cloud-Native Applications
- Containerized Environments
- DevSecOps Practices
- Experience working in Agile development environments.
- Exposure to CI/CD security testing and automation.
- Industry certifications such as:
- GWAPT
- GPEN
- OSCP
- CSSLP
- CISSP
- CEH
Similar Jobs
Insurance
Build and operate an enterprise application security program. Responsibilities include managing SAST, DAST, SCA, API, and secrets scanning; integrating security testing into CI/CD; triaging vulnerabilities; distinguishing exploitable findings from false positives; coordinating remediation; delivering secure-coding education; translating security standards into developer guidance; applying threat intelligence; and producing risk-based reporting for technical, managerial, and executive audiences.
Top Skills:
Api Security ScanningAPIsCi/CdCloud Application EnvironmentsCvssCweDastMitre Att&CkOwasp Api Security Top 10Owasp Top 10SastScaSecrets Scanning
Information Technology
Drives growth of CDW’s security portfolio among state and local government customers. Builds executive relationships with CIOs and CISOs, leads security opportunities from discovery through close, and positions broad security solutions across identity, cloud, risk, compliance, threat management, and secure infrastructure. Partners with sales teams, solution architects, delivery teams, vendors, and public-sector stakeholders to develop integrated solutions, manage procurement cycles, coordinate events, and maintain accurate forecasts. Regional travel is required as needed.
Top Skills:
Cloud SecurityEndpoint SecurityIdentity And Access ManagementRisk And ComplianceSecure InfrastructureThreat And Vulnerability Management
Information Technology
Leads medium- to large-scale technology projects and programs from planning through delivery, managing scope, schedules, budgets, risks, quality, profitability, and client relationships. Serves as a trusted technology consulting partner, coordinates cross-functional and third-party teams, supports presales, ensures Statement of Work commitments, and applies formal and Agile methodologies. Coaches project managers, improves PMO processes, and uses Jira, Azure DevOps, and Microsoft Project to drive successful outcomes.
Top Skills:
AgileAzure DevopsCloudInfrastructureItilJIRAMS OfficeMicrosoft ProjectSecurity
What you need to know about the Colorado Tech Scene
With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.
Key Facts About Colorado Tech
- Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
- Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
- Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
- Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute
