Application Security Analyst at SeamlessHR Limited

Details

Technical Expertise:

• Proficiency in programming languages (e.g., Python, Java, or Go).
• Strong understanding of cloud platforms (AWS, Azure, Google Cloud).
• Experience with containerization (Docker, Kubernetes) and container security tools (e.g., Aqua Security, Twistlock).

Security Knowledge:

• Familiarity with OWASP Top Ten, CVSS, and threat modeling.
• Knowledge of cryptographic protocols and secure key management.

DevOps Tools:

• Hands-on experience with CI/CD tools (Jenkins, GitLab, GitHub Actions).
• Understanding of version control (e.g., Git).

Automation and Scripting:

• Proficiency in scripting (Bash, PowerShell, etc.).
• Experience with configuration management tools (Ansible, Puppet, Chef).

Soft Skills:

• Strong communication and collaboration skills to work across teams.
• Analytical mindset and problem-solving abilities.

Integrating Security in CI/CD Pipelines:

• Implement and manage security tools (e.g., SAST, DAST, SCA) within the CI/CD workflows.
• Automate security checks for code, container images, and dependencies.

 Securing Infrastructure and Applications:

• Harden cloud environments, containerized applications, and underlying infrastructure.
• Conduct regular vulnerability assessments and apply remediation strategies.

 Managing Threats and Incidents:

• Monitor and analyze logs to detect anomalies and potential threats.
• Develop and execute incident response strategies and disaster recovery plans.

 Training and Collaboration:

• Collaborate with development, operations, and security teams to promote secure coding practices.
• Provide training on security tools and processes to team members.

 Continuous Improvement and Reporting:

• Regularly assess and improve security configurations and workflows.
• Provide detailed reports on security metrics, threat levels, and remediation efforts.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, or related field.
• Relevant certifications (e.g., AWS Security Specialty, Certified DevSecOps Engineer, CISSP, CEH).
• 2–4 years of experience in DevOps, security engineering, or related roles