Performs application security assessments, penetration testing, secure code reviews, vulnerability analysis, and remediation validation across web applications, APIs, microservices, and backend systems. Produces detailed security reports, prioritizes risks, recommends mitigations, and communicates findings to technical and executive stakeholders. The role supports secure-by-design practices throughout the SDLC and evaluates modern cloud-native, containerized, and DevSecOps environments.
Location: Alpharetta, Georgia
Type of Hire: Full-Time / W2
Company: Hexaware Technologies
Hexaware Technologies is seeking a highly skilled Application Security Analyst to join our cybersecurity team. This role is responsible for identifying, analyzing, and mitigating application security risks through comprehensive security assessments, penetration testing, secure code reviews, and vulnerability management activities.
The ideal candidate will possess strong expertise in application security testing methodologies, secure software development practices, vulnerability assessment techniques, and risk analysis. This individual will work closely with development, architecture, and engineering teams to strengthen the organization's security posture and promote secure-by-design principles across the software development lifecycle.
Key ResponsibilitiesApplication Security Assessments- Perform comprehensive manual application security assessments across web applications, APIs, microservices, and backend systems.
- Conduct application penetration testing to identify security vulnerabilities, attack vectors, and exploitation opportunities.
- Execute secure code reviews to identify insecure coding practices and validate adherence to security standards.
- Assess application architectures and recommend security enhancements throughout the Software Development Lifecycle (SDLC).
- Identify, validate, and prioritize security vulnerabilities based on exploitability, business impact, and potential risk.
- Analyze application security findings and determine root causes.
- Partner with development teams to provide remediation guidance and security best practices.
- Evaluate risks within modern application architectures, including cloud-native and API-driven environments.
- Utilize industry-standard security testing tools, including:
- Burp Suite
- OWASP ZAP
- Security Proxies
- Web Application Scanners
- Fuzzing Tools
- API Testing Platforms
- Validate remediation efforts through re-testing and verification activities.
- Develop repeatable testing methodologies and security assessment procedures.
- Produce detailed and professional security assessment reports that include:
- Testing scope and methodology
- Technical findings and supporting evidence
- Vulnerability severity ratings
- Root cause analysis
- Business impact assessment
- Practical remediation recommendations
- Present security findings to both technical and non-technical stakeholders.
- Clearly communicate security risks and remediation priorities to development and leadership teams.
- Strong experience performing manual application security assessments and penetration testing.
- Deep understanding of common application security vulnerabilities and attack techniques.
- Hands-on experience identifying and exploiting application security weaknesses in web applications, APIs, and backend services.
- Strong understanding of secure design principles and secure development practices.
- Proven experience conducting manual source code reviews.
- Ability to identify insecure coding practices and provide guidance on secure coding standards.
- Experience reviewing code in one or more programming languages such as:
- Java
- C#
- Python
- JavaScript/TypeScript
- Go
- Node.js
- Strong knowledge of:
- OWASP Top 10
- OWASP ASVS
- Secure Coding Best Practices
- Application Security Testing Methodologies
- Industry Security Controls and Frameworks
- Understanding of authentication, authorization, session management, encryption, and API security principles.
- Experience assessing vulnerability severity using industry-standard methodologies.
- Strong analytical and problem-solving skills.
- Excellent written and verbal communication skills.
- Ability to communicate effectively with developers, architects, project teams, and executive stakeholders.
- Previous software development experience.
- Familiarity with modern application architectures, including:
- Microservices
- REST APIs
- Cloud-Native Applications
- Containerized Environments
- DevSecOps Practices
- Experience working in Agile development environments.
- Exposure to CI/CD security testing and automation.
- Industry certifications such as:
- GWAPT
- GPEN
- OSCP
- CSSLP
- CISSP
- CEH
Hexaware Technologies Boston, Massachusetts, USA Office
Boston, United States
Similar Jobs
Insurance
Build and operate an enterprise application security program. Responsibilities include managing SAST, DAST, SCA, API, and secrets scanning; integrating security testing into CI/CD; triaging vulnerabilities; distinguishing exploitable findings from false positives; coordinating remediation; delivering secure-coding education; translating security standards into developer guidance; applying threat intelligence; and producing risk-based reporting for technical, managerial, and executive audiences.
Top Skills:
Api Security ScanningAPIsCi/CdCloud Application EnvironmentsCvssCweDastMitre Att&CkOwasp Api Security Top 10Owasp Top 10SastScaSecrets Scanning
Cloud • Information Technology • Security • Software • Cybersecurity
Designs and operates highly available infrastructure across public clouds and bare-metal environments. Builds Python/Go automation and self-healing systems, advances observability using Prometheus, Grafana, and OpenTelemetry, establishes SLOs, leads incident response, and performs post-incident analysis. Partners with engineering teams on operability reviews while improving reliability, scalability, and service maturity through automation, ITIL, and problem management.
Top Skills:
AiopsAnsibleAWSAzureBare-Metal InfrastructureBgpC/C++Chaos EngineeringDnsFreebsdGCPGoGrafanaGreHaproxyIpsecItilLinuxMachine LearningOpentelemetryPrometheusPythonTerraform
Cloud • Information Technology • Security • Software • Cybersecurity
As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.
Top Skills:
AWSAzureGCPKubernetesNode.jsPythonTypescript
What you need to know about the Boston Tech Scene
Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.
Key Facts About Boston Tech
- Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
- Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
- Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
- Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories
