Location: Alpharetta, Georgia
Type of Hire: Full-Time / W2
Company: Hexaware Technologies
Hexaware Technologies is seeking a highly skilled Application Security Analyst to join our cybersecurity team. This role is responsible for identifying, analyzing, and mitigating application security risks through comprehensive security assessments, penetration testing, secure code reviews, and vulnerability management activities.
The ideal candidate will possess strong expertise in application security testing methodologies, secure software development practices, vulnerability assessment techniques, and risk analysis. This individual will work closely with development, architecture, and engineering teams to strengthen the organization's security posture and promote secure-by-design principles across the software development lifecycle.
Key ResponsibilitiesApplication Security Assessments- Perform comprehensive manual application security assessments across web applications, APIs, microservices, and backend systems.
- Conduct application penetration testing to identify security vulnerabilities, attack vectors, and exploitation opportunities.
- Execute secure code reviews to identify insecure coding practices and validate adherence to security standards.
- Assess application architectures and recommend security enhancements throughout the Software Development Lifecycle (SDLC).
- Identify, validate, and prioritize security vulnerabilities based on exploitability, business impact, and potential risk.
- Analyze application security findings and determine root causes.
- Partner with development teams to provide remediation guidance and security best practices.
- Evaluate risks within modern application architectures, including cloud-native and API-driven environments.
- Utilize industry-standard security testing tools, including:
- Burp Suite
- OWASP ZAP
- Security Proxies
- Web Application Scanners
- Fuzzing Tools
- API Testing Platforms
- Validate remediation efforts through re-testing and verification activities.
- Develop repeatable testing methodologies and security assessment procedures.
- Produce detailed and professional security assessment reports that include:
- Testing scope and methodology
- Technical findings and supporting evidence
- Vulnerability severity ratings
- Root cause analysis
- Business impact assessment
- Practical remediation recommendations
- Present security findings to both technical and non-technical stakeholders.
- Clearly communicate security risks and remediation priorities to development and leadership teams.
- Strong experience performing manual application security assessments and penetration testing.
- Deep understanding of common application security vulnerabilities and attack techniques.
- Hands-on experience identifying and exploiting application security weaknesses in web applications, APIs, and backend services.
- Strong understanding of secure design principles and secure development practices.
- Proven experience conducting manual source code reviews.
- Ability to identify insecure coding practices and provide guidance on secure coding standards.
- Experience reviewing code in one or more programming languages such as:
- Java
- C#
- Python
- JavaScript/TypeScript
- Go
- Node.js
- Strong knowledge of:
- OWASP Top 10
- OWASP ASVS
- Secure Coding Best Practices
- Application Security Testing Methodologies
- Industry Security Controls and Frameworks
- Understanding of authentication, authorization, session management, encryption, and API security principles.
- Experience assessing vulnerability severity using industry-standard methodologies.
- Strong analytical and problem-solving skills.
- Excellent written and verbal communication skills.
- Ability to communicate effectively with developers, architects, project teams, and executive stakeholders.
- Previous software development experience.
- Familiarity with modern application architectures, including:
- Microservices
- REST APIs
- Cloud-Native Applications
- Containerized Environments
- DevSecOps Practices
- Experience working in Agile development environments.
- Exposure to CI/CD security testing and automation.
- Industry certifications such as:
- GWAPT
- GPEN
- OSCP
- CSSLP
- CISSP
- CEH
Skills Required
- Strong experience performing manual application security assessments and penetration testing
- Experience identifying and exploiting application security weaknesses in web applications, APIs, and backend services
- Strong understanding of secure design principles and secure development practices
- Proven experience conducting manual source code reviews
- Ability to identify insecure coding practices and advise on secure coding standards
- Experience reviewing code in Java, C#, Python, JavaScript or TypeScript, Go, or Node.js
- Strong knowledge of OWASP Top 10, OWASP ASVS, secure coding practices, application security testing methodologies, and industry security controls
- Understanding of authentication, authorization, session management, encryption, and API security principles
- Experience assessing vulnerability severity using industry-standard methodologies
- Strong analytical and problem-solving skills
- Excellent written and verbal communication skills
- Ability to communicate with developers, architects, project teams, and executive stakeholders
- Previous software development experience
- Familiarity with microservices, REST APIs, cloud-native applications, containerized environments, and DevSecOps practices
- Experience working in Agile development environments
- Exposure to CI/CD security testing and automation
- GWAPT, GPEN, OSCP, CSSLP, CISSP, or CEH certification
Hexaware Technologies Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Hexaware Technologies and has not been reviewed or approved by Hexaware Technologies.
-
Healthcare Strength — Feedback suggests health insurance is a standout element, often described as strong and comparable or better than many employers. Medical coverage and related protections are repeatedly highlighted as reliable pillars of the package.
-
Parental & Family Support — Parental leave options, including extended paid leave in some locations, are offered and seen as valuable for family needs. Feedback suggests these policies complement core medical coverage for a more complete family safety net.
-
Wellbeing & Lifestyle Benefits — Wellbeing resources such as an Employee Assistance Program, wellness initiatives, on-site gyms, and engagement activities provide lifestyle support. These offerings are reinforced by flexible work options and shift-related extras where applicable.
Hexaware Technologies Insights
What We Do
At Hexaware, we're not just a global technology and business process services company; we're a community of 27,000 Hexawarians dedicated to one singular purpose: creating smiles through the power of great people and technology. With a presence in 40+ offices across 19 countries, we empower enterprises worldwide to embark on their digital transformation journey with unparalleled scale and speed. As an employer, we're more than just a workplace. We put our people first, foster diversity and inclusivity, and prioritize their growth through robust learning and development programs. Our culture is a canvas for innovation as we work toward our shared vision of becoming the world’s most loved digital transformation partner. Exciting, isn’t it? Visit www.hexaware.com to join us in embracing the magic of technology, as we passionately advocate for its potential to transform lives today and shape a brighter future. Together, we'll make the digital world a better place.
