Application Security Analyst

Posted Date 06 Nov 2023

Experience	1 Years	Salary	2000AED
Job Type	Full Time	Company	Hiring organization
Job Category	Security	Qualification	Matric
Gender	Both	Last Date	04 Feb
Vacancies	1	Remote	No
Location(s)	Abu Dhabi , United Arab Emirates

Job Description

The⠀Application⠀Security⠀Analyst is⠀responsible⠀for⠀ensuring⠀the⠀security⠀and⠀integrity⠀of⠀software⠀applications⠀used⠀within the⠀organization.⠀This role⠀involves⠀assessing⠀application⠀vulnerabilities,⠀implementing⠀security⠀measures,⠀conducting⠀security⠀audits,⠀and⠀collaborating⠀with⠀development⠀teams to⠀address⠀security⠀issues.⠀The⠀Application⠀Security⠀Analyst⠀plays a⠀crucial⠀role in⠀protecting⠀sensitive⠀data and⠀ensuring⠀compliance⠀with⠀relevant⠀security⠀standar

Responsibilities

Security⠀Assessments:⠀Conduct⠀thorough⠀security⠀assessments⠀and⠀penetration⠀testing of⠀applications⠀to⠀identify⠀vulnerabilities⠀and⠀potential⠀security⠀risks.
Vulnerability⠀Management:⠀Identifying,⠀tracking,⠀and⠀prioritizing⠀security⠀vulnerabilities⠀in⠀applications⠀and⠀collaborating⠀with⠀development⠀teams to⠀address⠀and⠀remediate⠀them.
Secure⠀Code⠀Review:⠀Review⠀application⠀source⠀code for⠀security⠀flaws,⠀coding⠀best⠀practices,⠀and⠀adherence⠀to secure⠀coding⠀standards.
Security⠀Architecture⠀Review:⠀Assessing⠀the⠀security⠀architecture⠀of⠀applications⠀and⠀providing⠀recommendations⠀for⠀improvements⠀to ensure⠀proper⠀security⠀controls⠀and⠀defenses⠀are in⠀place.
Security⠀Policies⠀and⠀Standards:⠀Developing⠀and⠀implementing⠀security⠀policies,⠀standards,⠀and⠀guidelines⠀for⠀application⠀development⠀teams to⠀follow.
Security⠀Training⠀and⠀Awareness:⠀Conducting⠀security⠀training⠀sessions⠀and⠀workshops⠀to educate⠀developers⠀and other⠀stakeholders⠀about⠀secure⠀coding⠀practices,⠀common⠀vulnerabilities,⠀and⠀emerging⠀threats.
Incident⠀Response:⠀Participating⠀in⠀incident⠀response⠀activities,⠀including⠀analyzing⠀and⠀investigating⠀application⠀security⠀incidents,⠀and⠀implementing⠀appropriate⠀remediation⠀measures.
Security⠀Tooling:⠀Evaluating⠀and⠀deploying⠀security⠀tools and⠀technologies⠀to enhance⠀the⠀security⠀posture of⠀applications,⠀such as⠀static⠀code⠀analysis⠀tools, web⠀application⠀firewalls⠀(WAFs),⠀and⠀vulnerability⠀scanners.
Security⠀Compliance:⠀Ensuring⠀applications⠀comply⠀with⠀relevant⠀security⠀regulations,⠀industry⠀standards,⠀and best⠀practices,⠀such as⠀the OWASP⠀(Open Web⠀Application⠀Security⠀Project)⠀Top⠀10.
Collaboration⠀and⠀Communication:⠀Working⠀closely⠀with⠀cross-functional⠀teams,⠀including⠀developers,⠀system⠀administrators,⠀network⠀engineers,⠀and other⠀security⠀professionals,⠀to promote⠀a culture⠀of⠀security⠀and⠀implement⠀adequate⠀security⠀controls.
Certifications:⠀Industry⠀certifications⠀such as⠀Certified⠀Ethical⠀Hacker⠀(CEH),⠀Certified⠀Information⠀Systems⠀Security⠀Professional⠀(CISSP),⠀or⠀Certified⠀Secure⠀Software⠀Lifecycle⠀Professional⠀(CSSLP)⠀can be⠀beneficial.