Application Security Analyst

About the role

CureMD is hiring an Application Security Analyst to safeguard its applications, data and systems against security threats and vulnerabilities. The analyst works under the guidance of experienced security professionals, gaining hands-on experience in identifying and addressing security risks.

Key responsibilities

• Perform manual external and internal penetration testing and vulnerability assessments for cloud-based web, desktop and mobile apps.
• Analyze and audit the source code of web and mobile applications, and conduct static and dynamic code testing, manual code inspection, threat modeling and design reviews.
• Exploit known vulnerabilities and look for new ones; keep up with ethical hacking methods and new penetration testing tools.
• Collaborate with team members and stakeholders, assist in security operations tasks, and stay current on security assessment methods.

Required profile

• Bachelor's degree in Information/Cyber Security, Information Technology, Computer Science or Software Engineering, with a major in Information Security.
• 1 to 2 years of relevant experience.
• Experience testing business-critical environments.
• CEH or another related professional certification.

Required skills

• Proficiency in scripting, Unix, Windows and Linux configuration, utilities and programming.
• Knowledge of coding languages and OWASP Top Ten vulnerabilities.
• Understanding of security tools and technologies for penetration testing, including cryptography, authentication and secure software development.

What we offer

• Competitive salary and bi-annual bonus, with fast-track career growth for high performers.
• Company-sponsored vehicle financing (car and bike) and interest-free loans.
• Provident fund matching up to 8% of base salary.
• In-house clinic with 24/7 telemedicine, hospital treatment monitoring, comprehensive family health coverage and discounts at clinics and labs.
• Pick-up and drop-off for female employees, in-house daycare, gym and recreational area.
• Sponsored training, workshops, development programs, retreats and paid certifications.