Information Security Analyst

About the role

We are looking for an Information Security Analyst to lead security assessments and penetration testing for high‑critical web applications. The role works closely with development and DevOps teams to embed security early in the software lifecycle and provide clear visibility of risk to leadership.

Key responsibilities

• Conduct security, vulnerability and penetration assessments on a wide range of web applications and APIs.
• Perform Dynamic Application Security Testing (DAST) and evaluate findings to recommend remediation.
• Collaborate with DevOps teams to implement DevSecOps practices and shift‑left security.
• Analyze vulnerability exploitability and guide product teams on appropriate remediation levels.
• Prepare and deliver risk reports to leadership for informed decision‑making.

Required profile

• Strong knowledge of Windows operating systems and common web browsers.
• Familiarity with security testing tools such as Burp Suite, Nmap, ZAP.
• Experience with automated scanners for Static (SAST) and Dynamic (DAST) analysis.
• Understanding of DevSecOps principles and API security.

Required skills

• Windows OS
• Burp Suite
• Nmap
• ZAP
• SAST tools
• DAST tools
• DevSecOps
• API security testing
• Penetration testing
• Vulnerability assessment