Performs manual penetration testing of web, mobile, API, and microservices applications; conducts secure code reviews and design assessments; identifies and validates vulnerabilities; documents findings; supports remediation and incident response; guides junior testers; and promotes secure coding and application security awareness.
What You'll Do: The Application Security Analyst in Enterprise will report to the Application Security Lead
What You'll Bring:
- Typical daily work will consist of independently performing manual application penetration tests on web, mobile, APIs, and microservices across production and pre-production environments under defined testing scopes.
- Conduct secure code reviews and assist in design-level security assessments in collaboration with development and DevSecOps teams.
- Identify, validate, and document application security vulnerabilities related to OWASP Top 10, SANS Top 25, misconfigurations, and common insecure coding or design patterns.
- Provide technical guidance to junior AppSec testers, review assessment outputs, validate findings, and support skill development through peer reviews and knowledge sharing.
- Utilize industry-standard tools such as Burp Suite Pro, OWASP ZAP, Snyk, Checkmarx, Black Duck, Postman, and custom scripts to identify vulnerabilities at both runtime and source code levels.
- Ensure high-quality security testing by following established testing standards, performing peer validation of findings, and ensuring vulnerabilities are accurate, reproducible, and well-evidenced.
- Collaborate closely with developers, QA engineers, and architects to support remediation efforts and promote secure coding practices.
- Assist in providing security awareness and guidance to internal stakeholders to improve application security maturity.
- Support incident response activities by assisting in root cause analysis, vulnerability validation, and post-incident security assessments related to application security issues.
What You'll Bring:
- Bachelor's in computer science /management of computer information/information assurance or Cybersecurity
- 0-4 years of Penetration Testing / Application Security / Offensive Security
- Must have Security Certifications: OSCP/eWPTx and OSWA/OSWE/CWES/CWEE
- Preferred Security Certifications: CRTP/CARTP, CRTE, OSEP, GRTP
- Preferred Security Cloud Certifications: AWS CLP, AWS Security Specialty
- Must be a self-starter who can learn quickly and independently.
- Fluency in English
- Client-first mentality
- Intense work ethic
- Collaborative spirit and problem-solving approach
Similar Jobs at ZS
Artificial Intelligence • Healthtech • Professional Services • Analytics • Consulting
Owns ZS’s Azure enterprise architecture, governance, security, networking, infrastructure-as-code, CI/CD, identity, monitoring, and platform operations. Supports AKS, AI workloads, Microsoft 365, Power Platform, Azure DevOps, and ServiceNow integrations. The role provides technical guidance, investigates incidents, manages vendors, reviews solution architectures, automates operations, and serves as an L3 escalation point for Azure and Microsoft 365 issues.
Top Skills:
Arm TemplatesAzure Ai FoundryAzure Ai SearchAzure Api ManagementAzure App ServiceAzure AutomationAzure CliAzure Container AppsAzure Cost ManagementAzure DevopsAzure Devops BoardsAzure FirewallAzure FunctionsAzure Key VaultAzure Kubernetes ServiceAzure Load BalancerAzure MonitorAzure OpenaiAzure PolicyAzure Privileged Identity ManagementAzure RbacAzure ReposAzure StorageAzure Virtual DesktopAzure VnetsBicepContainer RegistriesCopilot StudioDataverseDockerGitKqlLog AnalyticsMicrosoft 365AzureMicrosoft CopilotMicrosoft Entra IdMicrosoft FabricMicrosoft GraphOauth 2.0Openid ConnectPower AppsPower AutomatePower BIPowershellPrivate DnsPrivate EndpointsPurview Information ProtectionRest ApisServicenowSharepointTerraformVnet IntegrationYaml Pipelines
Artificial Intelligence • Healthtech • Professional Services • Analytics • Consulting
Manages software asset and license lifecycles, including software requests, evaluations, onboarding, provisioning, renewals, reclamation, audits, compliance reporting, and cost optimization. Partners with Procurement, Security, Legal, Infrastructure, and vendors to assess risks, licensing, privacy, contracts, and deployment readiness. Maintains SAM/ITAM records, supports users with software-related issues, recommends alternatives, and improves governance and automation processes.
Top Skills:
It Asset Management SystemsMicrosoft 365ExcelSaas LicensingServicenow Sam Pro
Artificial Intelligence • Healthtech • Professional Services • Analytics • Consulting
Support global performance review cycles by executing performance enablement processes, leading workstreams, analyzing performance data, tracking KPIs, and producing leadership insights. Maintain HR performance systems, collaborate with HR business partners and leaders, support performance improvement plans, guide stakeholders on best practices, and help develop transparent communications. The role also contributes to process enhancements and continuous improvement across a global, cross-functional organization.
Top Skills:
HrisExcelPower BISap Successfactors
What you need to know about the Mumbai Tech Scene
From haggling for the best price at Chor Bazaar to the bustle of Crawford Market, the energy of Mumbai's traditional markets is a key part of the city's charm. And while these markets will always have their place, the city also boasts a thriving e-commerce scene, ranking among the largest in the region. Driven by online sales in everything from snacks to licensed sports merchandise to children's apparel, the local industry is worth billions, with companies actively recruiting to meet the demands of continued growth.
