Sr. AppSec Analyst DAST

Role: AppSec Analyst DAST

Location: Remote

Visa: USC/GC/H1b 1.5 - 2years validity

Experience: 7+years

Role Summary: The AppSec Analyst DAST is responsible for finding and remediating security vulnerabilities in MNAO’s running applications. This role is a hands-on position focused on dynamic application security testing and working directly with development teams to embed security into the SDLC.

Key Responsibilities:

• Configure, execute and maintain DAST Tools.
• Champions Secure by Design Methodology for MNAO and provide expert level SDLC support and guidance to developers.
• Conducts dynamic application security testing (DAST) for MNAO's applications.
• Finds and remediates vulnerabilities in MNAO's running applications.
• Focuses on data security vulnerabilities within applications and works with MNAO's data platform team.
• Creates detailed reports on DAST findings for development teams and management.
• Manages and tunes DAST tools and configurations.
• Collaborates with MNAO's development teams to integrate DAST into continuous integration/continuous delivery (CI/CD) pipelines.

Explore our comprehensive directory of visa sponsorship jobs from employers worldwide who are ready to sponsor talented international professionals.

• Provides guidance and training to development teams on secure coding practices.
• Ensures MNAO's applications adhere to established security policies, standards, and regulatory requirements.

Qualifications:

• Bachelor’s degree in computer science, Information Security, or a related field.
• Over 7 years of experience in application security, with a focus on DAST.
• Hands-on experience with DAST tools (e.g., OWASP ZAP, Burp Suite, commercial scanners).

Interested in opportunities specifically in United State? Discover our dedicated Visa Sponsorship Jobs in United State page featuring roles from top employers in this location.

• Experience with API security testing and authentication mechanisms (Oaith2, JWT, SSO etc.)
• Experience automating DSAT scans and integrating results into DevSecOps pipelines
• Knowledge of common web application vulnerabilities (e.g., OWASP Top 10).
• Proficiency in one or more programming languages.
• Relevant certifications such as GWEB, OSWE, or Security+

Interested candidates please share resume on samruddhi.salunke@leanitcorp.com