Cybersecurity Analyst (Application Security)

Role Overview We are seeking a Cybersecurity Analyst specialising in Application Security to assess, identify, and manage security vulnerabilities across enterprise applications and development projects. The successful candidate will work closely with development, DevOps, and security teams to evaluate application security risks, review vulnerability findings, recommend remediation measures, and support the implementation of security controls throughout the Software Development Life Cycle (SDLC). Key

Application Security & Vulnerability Management Conduct application security reviews and assessments across applications and development projects. Review and analyse security findings from Static Application Security Testing (SAST), Software Composition Analysis (SCA), and Dynamic Application Security Testing (DAST) tools. Assess application and dependency vulnerabilities based on exploitability, business impact, application context, and reachable code paths.

Identify false positives, non-applicable vulnerabilities, and potential security risks. Collaborate with development and DevOps teams to recommend remediation and mitigation measures. Track security vulnerabilities and remediation activities through to closure.

Security Risk Assessment & Governance Review security waiver and risk acceptance requests, including supporting justifications, compensating controls, and residual risks. Conduct or support application and cloud security risk assessments for new syste