Application Security Analyst

Infosys•Richardson, TX

About The Position

In the assigned Job Role of Technology Consultant 1, your Area Of Responsibility will be as below: Assist in conducting targeted interviews and workshops to capture user needs, and ensure accurate documentation of stakeholder requirements. Participate in design discussions to capture software specifications, and aid in creation of process documentation. Develop, refine, and document code for new software applications, following detailed design specifications to meet user requirements. Execute test plans, analyse outcomes, and report defects to the development team, to facilitate enhancement of software performance. Support the integration of new software features, facilitating smooth transitions within the existing system infrastructure. Monitor and troubleshoot live applications, ensuring prompt resolution of issues and creation of comprehensive documentation for ongoing system maintenance. Systematically document coding practices, testing methodologies, and technical solutions, thereby enriching team's knowledge repository. Your contribution to the team: An agile mindset with effective communication and problem-solving skills. The ability to work on majority of the areas as part of SDLC lifecycle. Passion for innovating solutions that drive progress and meet future challenges. A proactive approach to monitoring and resolving production issues before they escalate. Commitment to continuous learning, knowledge sharing, and fostering team development.

Requirements

Hands on experience with tools like Burp Suite, CheckMarx, SonarQube, Veracode, or Fortify.
Familiarity with programming languages such as Java, Python, or C#.
Understanding of web application vulnerabilities (SQL Injection, XSS, CSRF) and common security frameworks.
Bachelor’s degree or foreign equivalent required from an accredited institution. Will also consider three years of progressive experience in the specialty in lieu of every year of education.
Candidates authorized to work for any employer in the United States without employer-based visa sponsorship are welcome to apply.

Nice To Haves

Communication and problem-solving skills, with a proven ability to bridge the gap between development and security.
Familiar with Application Security concepts and tooling.
Exposure to DevSecOps, CI/CD pipelines, and container security (Docker, Kubernetes).
Experience in SIEM/SOAR, cloud security (AWS/Azure/GCP), or IT risk management frameworks.

Responsibilities

Assist in conducting targeted interviews and workshops to capture user needs, and ensure accurate documentation of stakeholder requirements
Participate in design discussions to capture software specifications, and aid in creation of process documentation.
Develop, refine, and document code for new software applications, following detailed design specifications to meet user requirements
Execute test plans, analyse outcomes, and report defects to the development team, to facilitate enhancement of software performance
Support the integration of new software features, facilitating smooth transitions within the existing system infrastructure
Monitor and troubleshoot live applications, ensuring prompt resolution of issues and creation of comprehensive documentation for ongoing system maintenance
Systematically document coding practices, testing methodologies, and technical solutions, thereby enriching team's knowledge repository
Conduct Software Composition Analysis(SCA), Static and Dynamic Application Security Testing (SAST/DAST) on web and mobile applications.
Triage, prioritize, and assist in the remediation of application vulnerabilities (e.g., OWASP Top 10).
Partner with software engineering teams to provide actionable guidance and fix recommendations for secure code implementation.
Participate in architecture reviews and threat modeling sessions to identify security flaws before code is deployed to production.
Manage and optimize application security tools, integrating them into CI/CD pipelines.