Job Description
Job DescriptionRole: AppSec Analyst DAST
Location: Remote
Role Summary: The AppSec Analyst DAST is responsible for finding and remediating security vulnerabilities in MNAO s running applications. This role is a hands-on position focused on dynamic application security testing and working directly with development teams to embed security into the SDLC.
Key Responsibilities:
- Configure, execute and maintain DAST Tools.
- Champions Secure by Design Methodology for MNAO and provide expert level SDLC support and guidance to developers.
- Conducts dynamic application security testing (DAST) for MNAO's applications.
- Finds and remediates vulnerabilities in MNAO's running applications.
- Focuses on data security vulnerabilities within applications and works with MNAO's data platform team.
- Creates detailed reports on DAST findings for development teams and management.
- Manages and tunes DAST tools and configurations.
- Collaborates with MNAO's development teams to integrate DAST into continuous integration/continuous delivery (CI/CD) pipelines.
- Provides guidance and training to development teams on secure coding practices.
- Ensures MNAO's applications adhere to established security policies, standards, and regulatory requirements.
Qualifications:
- Bachelor s degree in computer science, Information Security, or a related field.
- Over 7 years of experience in application security, with a focus on DAST.
- Hands-on experience with DAST tools (e.g., OWASP ZAP, Burp Suite, commercial scanners).
- Experience with API security testing and authentication mechanisms (Oaith2, JWT, SSO etc.)
- Experience automating DSAT scans and integrating results into DevSecOps pipelines
- Knowledge of common web application vulnerabilities (e.g., OWASP Top 10).
- Proficiency in one or more programming languages.
- Relevant certifications such as GWEB, OSWE, or Security