Performs application security assessments, penetration testing, secure code reviews, vulnerability analysis, and remediation validation across web applications, APIs, microservices, and backend systems. Produces detailed security reports, prioritizes risks, recommends mitigations, and communicates findings to technical and executive stakeholders. The role supports secure-by-design practices throughout the SDLC and evaluates modern cloud-native, containerized, and DevSecOps environments.
Location: Alpharetta, Georgia
Type of Hire: Full-Time / W2
Company: Hexaware Technologies
Hexaware Technologies is seeking a highly skilled Application Security Analyst to join our cybersecurity team. This role is responsible for identifying, analyzing, and mitigating application security risks through comprehensive security assessments, penetration testing, secure code reviews, and vulnerability management activities.
The ideal candidate will possess strong expertise in application security testing methodologies, secure software development practices, vulnerability assessment techniques, and risk analysis. This individual will work closely with development, architecture, and engineering teams to strengthen the organization's security posture and promote secure-by-design principles across the software development lifecycle.
Key ResponsibilitiesApplication Security Assessments- Perform comprehensive manual application security assessments across web applications, APIs, microservices, and backend systems.
- Conduct application penetration testing to identify security vulnerabilities, attack vectors, and exploitation opportunities.
- Execute secure code reviews to identify insecure coding practices and validate adherence to security standards.
- Assess application architectures and recommend security enhancements throughout the Software Development Lifecycle (SDLC).
- Identify, validate, and prioritize security vulnerabilities based on exploitability, business impact, and potential risk.
- Analyze application security findings and determine root causes.
- Partner with development teams to provide remediation guidance and security best practices.
- Evaluate risks within modern application architectures, including cloud-native and API-driven environments.
- Utilize industry-standard security testing tools, including:
- Burp Suite
- OWASP ZAP
- Security Proxies
- Web Application Scanners
- Fuzzing Tools
- API Testing Platforms
- Validate remediation efforts through re-testing and verification activities.
- Develop repeatable testing methodologies and security assessment procedures.
- Produce detailed and professional security assessment reports that include:
- Testing scope and methodology
- Technical findings and supporting evidence
- Vulnerability severity ratings
- Root cause analysis
- Business impact assessment
- Practical remediation recommendations
- Present security findings to both technical and non-technical stakeholders.
- Clearly communicate security risks and remediation priorities to development and leadership teams.
- Strong experience performing manual application security assessments and penetration testing.
- Deep understanding of common application security vulnerabilities and attack techniques.
- Hands-on experience identifying and exploiting application security weaknesses in web applications, APIs, and backend services.
- Strong understanding of secure design principles and secure development practices.
- Proven experience conducting manual source code reviews.
- Ability to identify insecure coding practices and provide guidance on secure coding standards.
- Experience reviewing code in one or more programming languages such as:
- Java
- C#
- Python
- JavaScript/TypeScript
- Go
- Node.js
- Strong knowledge of:
- OWASP Top 10
- OWASP ASVS
- Secure Coding Best Practices
- Application Security Testing Methodologies
- Industry Security Controls and Frameworks
- Understanding of authentication, authorization, session management, encryption, and API security principles.
- Experience assessing vulnerability severity using industry-standard methodologies.
- Strong analytical and problem-solving skills.
- Excellent written and verbal communication skills.
- Ability to communicate effectively with developers, architects, project teams, and executive stakeholders.
- Previous software development experience.
- Familiarity with modern application architectures, including:
- Microservices
- REST APIs
- Cloud-Native Applications
- Containerized Environments
- DevSecOps Practices
- Experience working in Agile development environments.
- Exposure to CI/CD security testing and automation.
- Industry certifications such as:
- GWAPT
- GPEN
- OSCP
- CSSLP
- CISSP
- CEH
Hexaware Technologies Chicago, Illinois, USA Office
Chicago, United States, 0
Similar Jobs
Insurance
Build and operate an enterprise application security program. Responsibilities include managing SAST, DAST, SCA, API, and secrets scanning; integrating security testing into CI/CD; triaging vulnerabilities; distinguishing exploitable findings from false positives; coordinating remediation; delivering secure-coding education; translating security standards into developer guidance; applying threat intelligence; and producing risk-based reporting for technical, managerial, and executive audiences.
Top Skills:
Api Security ScanningAPIsCi/CdCloud Application EnvironmentsCvssCweDastMitre Att&CkOwasp Api Security Top 10Owasp Top 10SastScaSecrets Scanning
Fintech • HR Tech
Own paid social strategy and execution across major platforms, managing multi-million-dollar budgets, attribution, creative testing, and full-funnel campaigns. Test emerging acquisition channels, use AI to improve marketing workflows, and partner cross-functionally to drive pipeline and revenue. Lead measurement, audience strategy, campaign optimization, landing-page alignment, and scalable paid acquisition playbooks.
Top Skills:
Ai ToolsCampaign Attribution And Tracking SystemsChatgpt AdsGoogle Demand Generation CampaignsLinkedInMarketing PixelsMetaQuoraRedditTiktok
Financial Services
Leads enterprise network infrastructure engineering across campus, data center, WAN, and cloud environments. Architects and implements complex technology initiatives, leads incident and problem resolution, drives automation and observability, mentors engineers, and coordinates infrastructure, security, platform, and vendor teams. Uses and validates AI-assisted workflows while ensuring resiliency, compliance, security, traceability, and auditability.
Top Skills:
Ai-Assisted Infrastructure EngineeringAlertingCampus NetworkingCloud InfrastructureData Center NetworkingDhcpDnsInfrastructure AutomationIpamMonitoringNetwork RoutingNetwork SegmentationNetwork SwitchingObservabilityPrivate CloudPublic CloudQosScriptingWan
What you need to know about the Chicago Tech Scene
With vibrant neighborhoods, great food and more affordable housing than either coast, Chicago might be the most liveable major tech hub. It is the birthplace of modern commodities and futures trading, a national hub for logistics and commerce, and home to the American Medical Association and the American Bar Association. This diverse blend of industry influences has helped Chicago emerge as a major player in verticals like fintech, biotechnology, legal tech, e-commerce and logistics technology. It’s also a major hiring center for tech companies on both coasts.
Key Facts About Chicago Tech
- Number of Tech Workers: 245,800; 5.2% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: McDonald’s, John Deere, Boeing, Morningstar
- Key Industries: Artificial intelligence, biotechnology, fintech, software, logistics technology
- Funding Landscape: $2.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Pritzker Group Venture Capital, Arch Venture Partners, MATH Venture Partners, Jump Capital, Hyde Park Venture Partners
- Research Centers and Universities: Northwestern University, University of Chicago, University of Illinois Urbana-Champaign, Illinois Institute of Technology, Argonne National Laboratory, Fermi National Accelerator Laboratory
