Description

Job Description This is a remote position. Application security analyst - US Only Experience: 1+ years Employment Type: Full-time, Remote Base Salary: $60K-$70K Phoenix Recruitment offers a variety of recruiting services to assist both employers and employees. They are specialized in marketing open positions, recruiting, and helping employers to find qualified candidates across various industries. Phoenix Recruitment has expertise in streamlining the hiring process. They can help ensure that the process is efficient, well organized, and compliant with relevant regulations. Tasks ​ Tasks within the SDLC process: analysis of analyzer results, rule refinement, evaluation of their effectiveness; Source code analysis of applications in Java; Conducting internal penetration tests; Diving into the workings of containerized applications, understanding their implementations; Preparing recommendations for identified vulnerabilities, taking into account the specifics of the technological stack and implementations.

Role and Responsibilities

• Experience with DAST (AFL, Fuzzing, Burp), including creating custom “farms”; Experience in conducting pen tests for virtualized infrastructure; Experience in analyzing mobile applications; Programming skills in Java; Experience with k8s, Docker; Experience with traffic analyzers (Wire shark, etc.); Experience in automating routine security processes; Understanding of modern software development processes and practices: Agile, SDLC, DevOps, CI/CD; Competent written and verbal communication skills (English B1, Russian B2+). Successful participation in Bug Bounty programs; CTF experience; Familiarity with OWASP Testing Guide, OWASP Code Review Guide, OWASP Secure Coding Practices; Experience working with and supporting HashiCorp Vault; Experience with network vulnerability scanners (Sureness, XSpider, MaxPatrol, etc.).