AppSec Analyst DAST

Role: AppSec Analyst DAST
Location: Remote

Role Summary: The AppSec Analyst DAST is responsible for finding and remediating security vulnerabilities in MNAO s running applications. This role is a hands-on position focused on dynamic application security testing and working directly with development teams to embed security into the SDLC.
Key Responsibilities:

• Configure, execute and maintain DAST Tools.
• Champions Secure by Design Methodology for MNAO and provide expert level SDLC support and guidance to developers.
• Conducts dynamic application security testing (DAST) for MNAO's applications.
• Finds and remediates vulnerabilities in MNAO's running applications.
• Focuses on data security vulnerabilities within applications and works with MNAO's data platform team.
• Creates detailed reports on DAST findings for development teams and management.
• Manages and tunes DAST tools and configurations.
• Collaborates with MNAO's development teams to integrate DAST into continuous integration/continuous delivery (CI/CD) pipelines.
• Provides guidance and training to development teams on secure coding practices.
• Ensures MNAO's applications adhere to established security policies, standards, and regulatory requirements.

Qualifications:

• Bachelor s degree in computer science, Information Security, or a related field.
• Over 7 years of experience in application security, with a focus on DAST.
• Hands-on experience with DAST tools (e.g., OWASP ZAP, Burp Suite, commercial scanners).
• Experience with API security testing and authentication mechanisms (Oaith2, JWT, SSO etc.)
• Experience automating DSAT scans and integrating results into DevSecOps pipelines
• Knowledge of common web application vulnerabilities (e.g., OWASP Top 10).
• Proficiency in one or more programming languages.
• Relevant certifications such as GWEB, OSWE, or Security+