Performs application security assessments, penetration testing, secure code reviews, vulnerability analysis, and remediation validation across web applications, APIs, microservices, and backend systems. Produces detailed security reports, prioritizes risks, recommends mitigations, and communicates findings to technical and executive stakeholders. The role supports secure-by-design practices throughout the SDLC and evaluates modern cloud-native, containerized, and DevSecOps environments.
Location: Alpharetta, Georgia
Type of Hire: Full-Time / W2
Company: Hexaware Technologies
Hexaware Technologies is seeking a highly skilled Application Security Analyst to join our cybersecurity team. This role is responsible for identifying, analyzing, and mitigating application security risks through comprehensive security assessments, penetration testing, secure code reviews, and vulnerability management activities.
The ideal candidate will possess strong expertise in application security testing methodologies, secure software development practices, vulnerability assessment techniques, and risk analysis. This individual will work closely with development, architecture, and engineering teams to strengthen the organization's security posture and promote secure-by-design principles across the software development lifecycle.
Key ResponsibilitiesApplication Security Assessments- Perform comprehensive manual application security assessments across web applications, APIs, microservices, and backend systems.
- Conduct application penetration testing to identify security vulnerabilities, attack vectors, and exploitation opportunities.
- Execute secure code reviews to identify insecure coding practices and validate adherence to security standards.
- Assess application architectures and recommend security enhancements throughout the Software Development Lifecycle (SDLC).
- Identify, validate, and prioritize security vulnerabilities based on exploitability, business impact, and potential risk.
- Analyze application security findings and determine root causes.
- Partner with development teams to provide remediation guidance and security best practices.
- Evaluate risks within modern application architectures, including cloud-native and API-driven environments.
- Utilize industry-standard security testing tools, including:
- Burp Suite
- OWASP ZAP
- Security Proxies
- Web Application Scanners
- Fuzzing Tools
- API Testing Platforms
- Validate remediation efforts through re-testing and verification activities.
- Develop repeatable testing methodologies and security assessment procedures.
- Produce detailed and professional security assessment reports that include:
- Testing scope and methodology
- Technical findings and supporting evidence
- Vulnerability severity ratings
- Root cause analysis
- Business impact assessment
- Practical remediation recommendations
- Present security findings to both technical and non-technical stakeholders.
- Clearly communicate security risks and remediation priorities to development and leadership teams.
- Strong experience performing manual application security assessments and penetration testing.
- Deep understanding of common application security vulnerabilities and attack techniques.
- Hands-on experience identifying and exploiting application security weaknesses in web applications, APIs, and backend services.
- Strong understanding of secure design principles and secure development practices.
- Proven experience conducting manual source code reviews.
- Ability to identify insecure coding practices and provide guidance on secure coding standards.
- Experience reviewing code in one or more programming languages such as:
- Java
- C#
- Python
- JavaScript/TypeScript
- Go
- Node.js
- Strong knowledge of:
- OWASP Top 10
- OWASP ASVS
- Secure Coding Best Practices
- Application Security Testing Methodologies
- Industry Security Controls and Frameworks
- Understanding of authentication, authorization, session management, encryption, and API security principles.
- Experience assessing vulnerability severity using industry-standard methodologies.
- Strong analytical and problem-solving skills.
- Excellent written and verbal communication skills.
- Ability to communicate effectively with developers, architects, project teams, and executive stakeholders.
- Previous software development experience.
- Familiarity with modern application architectures, including:
- Microservices
- REST APIs
- Cloud-Native Applications
- Containerized Environments
- DevSecOps Practices
- Experience working in Agile development environments.
- Exposure to CI/CD security testing and automation.
- Industry certifications such as:
- GWAPT
- GPEN
- OSCP
- CSSLP
- CISSP
- CEH
Similar Jobs
Insurance
Build and operate an enterprise application security program. Responsibilities include managing SAST, DAST, SCA, API, and secrets scanning; integrating security testing into CI/CD; triaging vulnerabilities; distinguishing exploitable findings from false positives; coordinating remediation; delivering secure-coding education; translating security standards into developer guidance; applying threat intelligence; and producing risk-based reporting for technical, managerial, and executive audiences.
Top Skills:
Api Security ScanningAPIsCi/CdCloud Application EnvironmentsCvssCweDastMitre Att&CkOwasp Api Security Top 10Owasp Top 10SastScaSecrets Scanning
Artificial Intelligence • Fintech • Insurance • Marketing Tech • Software • Analytics
Investigates and resolves moderate-to-severe property loss claims, determines coverage, coordinates appraisals and vendors, supports policyholders with damage itemization and emergency arrangements, identifies suspicious losses, and recommends SIU referrals. The role requires independent claims management, negotiation, customer service, construction knowledge, advanced property training, licensing eligibility, and may involve catastrophe duty.
Artificial Intelligence • Fintech • Insurance • Marketing Tech • Software • Analytics
Analyze personal auto insurance performance by state to identify pricing and underwriting opportunities, develop growth and profitability projections, evaluate program launches, monitor marketplace and claims trends, and advise state leadership on strategic decisions. The role partners across pricing, underwriting, product, claims, finance, modeling, and distribution while improving analytical tools and automation.
Top Skills:
AIAutomationExcelSAS
What you need to know about the Colorado Tech Scene
With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.
Key Facts About Colorado Tech
- Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
- Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
- Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
- Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute
