ZS Jobs

Application Security Analyst

ZS

Application Security Analyst

Posted One Month Ago

Pune, Maharashtra, IND

Hybrid

Mid level

Artificial Intelligence • Healthtech • Professional Services • Analytics • Consulting

Where passion changes lives

The Role

Performs manual penetration testing of web, mobile, API, and microservices applications; conducts secure code reviews and design assessments; identifies and validates vulnerabilities; documents findings; supports remediation and incident response; guides junior testers; and promotes secure coding and application security awareness.

Summary Generated by Built In

What You'll Do: The Application Security Analyst in Enterprise will report to the Application Security Lead

Typical daily work will consist of independently performing manual application penetration tests on web, mobile, APIs, and microservices across production and pre-production environments under defined testing scopes.
Conduct secure code reviews and assist in design-level security assessments in collaboration with development and DevSecOps teams.
Identify, validate, and document application security vulnerabilities related to OWASP Top 10, SANS Top 25, misconfigurations, and common insecure coding or design patterns.
Provide technical guidance to junior AppSec testers, review assessment outputs, validate findings, and support skill development through peer reviews and knowledge sharing.
Utilize industry-standard tools such as Burp Suite Pro, OWASP ZAP, Snyk, Checkmarx, Black Duck, Postman, and custom scripts to identify vulnerabilities at both runtime and source code levels.
Ensure high-quality security testing by following established testing standards, performing peer validation of findings, and ensuring vulnerabilities are accurate, reproducible, and well-evidenced.
Collaborate closely with developers, QA engineers, and architects to support remediation efforts and promote secure coding practices.
Assist in providing security awareness and guidance to internal stakeholders to improve application security maturity.
Support incident response activities by assisting in root cause analysis, vulnerability validation, and post-incident security assessments related to application security issues.

What You'll Bring:

Bachelor's in computer science /management of computer information/information assurance or Cybersecurity
0-4 years of Penetration Testing / Application Security / Offensive Security
Must have Security Certifications: OSCP/eWPTx and OSWA/OSWE/CWES/CWEE
Preferred Security Certifications: CRTP/CARTP, CRTE, OSEP, GRTP
Preferred Security Cloud Certifications: AWS CLP, AWS Security Specialty
Must be a self-starter who can learn quickly and independently.
Fluency in English
Client-first mentality
Intense work ethic
Collaborative spirit and problem-solving approach

Skills Required

Bachelor's degree in computer science, management of computer information, information assurance, or cybersecurity
0-4 years of penetration testing, application security, or offensive security experience
OSCP or eWPTx certification
OSWA, OSWE, CWES, or CWEE certification
Fluency in English
Self-starter with ability to learn quickly and independently
Client-first mentality
Intense work ethic
Collaborative spirit and problem-solving approach
CRTP, CARTP, CRTE, OSEP, or GRTP certification
AWS Cloud Practitioner or AWS Security Specialty certification

What the Team is Saying

ZS Compensation & Benefits Highlights

Healthcare Strength — Healthcare is described as a standout, with low‑cost medical through UMR/UnitedHealthcare, fully covered vision with an eyewear allowance, and mental‑health resources such as Talkspace, Bend Health, and a 24/7 EAP. Dental coverage is detailed as strong as well, including 100% for preventive/basic services and additional support for major and orthodontic care.
Parental & Family Support — The package includes 10 weeks of paid family leave and extensive family‑forming support (e.g., Carrot), plus backup childcare/eldercare/pet care and travel support like Milk Stork. These offerings indicate robust support for a wide range of family needs.
Leave & Time Off Breadth — Paid time off starts at 15 days from hire and increases to 20 days after 36 months, alongside 11 paid holidays, a floating holiday, and sick time with rollover. This structure signals broad time‑off provisions on paper.

Learn more about ZS's Compensation & Benefits →

ZS Insights

What's It Like to Work at ZS? ZS Culture & Values ZS Career Growth & Development What's the Work-Life Balance Like at ZS? ZS Leadership & Management ZS Company Growth, Stability & Outlook

View all jobs at ZS

View ZS Profile

Report Job

Am I A Good Fit?

beta

Get Personalized Job Insights.

Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company

HQ: Evanston, IL

15,000 Employees

Year Founded: 1983

What We Do

ZS is a management consulting and technology firm that partners with companies to improve life and how we live it. We transform ideas into impact by bringing together data, science, technology and human ingenuity to deliver better outcomes for all. Founded in 1983, ZS has more than 15,000+ employees in over 40 offices worldwide.

Why Work With Us

ZS is home to passionate people who embrace innovative thinking, collaboration and a client-first mindset. Welcome to a company where new ideas are celebrated, curiosity is welcomed, learning opportunities are abundant and colleagues become lifelong connections.