Application Security Analyst
Confirmed on the employer's own hiring board on Oct 30, 2026. First seen by Alion on Oct 27, 2026.
About the role
We are looking for an Application Security Analyst to identify, investigate, and help reduce security risks affecting our applications and APIs.
You will independently triage alerts, investigate potential incidents, validate vulnerabilities, and communicate risk to relevant stakeholders. You will also improve runbooks and write scripts that make recurring analysis and response work faster and more consistent.
Key Responsibilities
Security monitoring and incident response:
- Monitor and triage application-security alerts from SIEM, WAF, application, API, and related telemetry;
- Independently validate alerts, gather evidence, identify affected assets, assess potential impact, and assign priorities;
- Investigate incidents by correlating logs, reconstructing timelines, testing hypotheses, and identifying suspicious or malicious activity;
- Determine incident scope and likely impact and recommend immediate containment or risk-reduction actions;
- Maintain accurate records covering evidence, decisions, risk assessments, handovers, and escalation context;
- Escalate complex forensic analysis and remediation activities to the appropriate specialists;
- Participate in an incident-response rota or other agreed response duties where required.
Vulnerability analysis and triage
- Triage findings from security tools, penetration tests, bug bounty reports, incident investigations, and external disclosures;
- Validate whether vulnerabilities are reproducible and determine whether there is evidence of exploitation;
- Prioritize findings using severity, exploitability, exposure, affected data, business criticality, and compensating controls;
- Produce actionable findings that explain the issue, evidence, potential business impact, priority, and recommended next steps;
- Track remediation, ageing, exceptions, recurrence, and risk decisions through closure;
- Identify recurring vulnerability patterns and recommend improvements to procedures, guidance, or detection coverage.
Runbooks, scripting, and process improvement:
- Write, maintain, and test runbooks, standard operating procedures, investigation checklists, query guides, and handover procedures;
- Write Python, Bash, or similar scripts to automate repetitive analysis, data enrichment, evidence collection, alert validation, and reporting;
- Review investigations to identify gaps in procedures, telemetry, and escalation paths;
- Improve alert quality by documenting false-positive patterns, missing context, and tuning opportunities;
- Participate in tabletop exercises, case reviews, and post-incident improvement activities;
- Support less-experienced analysts through peer review and practical knowledge sharing.
Reporting and stakeholder collaboration:
- Communicate investigation results and security risks clearly to technical and non-technical stakeholders;
- Work with application owners and specialists to validate findings, agree next steps, and track risks through closure;
- Produce metrics and reports covering alert volumes, investigation outcomes, vulnerability trends, and remediation performance.
- 3-5 years of relevant experience in application security, security operations, incident response, vulnerability management, penetration testing, or a related cybersecurity role;
- Practical experience investigating security alerts and incidents using SIEM or log-management platforms;
- Ability to correlate telemetry from multiple sources and establish incident scope, timeline, and likely impact;
- Strong understanding of web application and API security, including the OWASP Top 10 and common attack techniques;
- Experience validating and prioritizing findings from SAST, DAST, vulnerability scanners, penetration tests, or bug bounty reports;
- Experience using tools such as Burp Suite, OWASP ZAP, or equivalent tools;
- Practical scripting ability in Python, Bash, or a similar language;
- Demonstrated ability to write clear runbooks and improve them using lessons from investigations;
- Strong analytical, critical-thinking, communication, and stakeholder-management skills;
- Ability to work independently on routine and moderately complex investigations.
Preferred Qualifications
- Experience analyzing WAF, CDN, API gateway, authentication, cloud, or application logs;
- Experience with Elastic, Splunk, Microsoft Sentinel, Chronicle, or an equivalent SIEM platform;
- Familiarity with CVSS, OWASP risk-rating methods, CWE, or similar frameworks;
- Exposure to bug bounty, threat hunting, digital forensics, or purple-team activities;
- Relevant certifications such as Security+, GCIH, GCIA, GWAPT, OSWA, or equivalent practical experience.
What Success Looks Like
- Alerts and incidents are independently triaged and investigated within agreed targets;
- Findings and escalations contain clear evidence, context, and risk assessments;
- Vulnerabilities are accurately validated, prioritised, and tracked through closure;
- Runbooks and scripts reduce repetitive work and improve investigation consistency;
- Investigation lessons result in measurable improvements to procedures and alert quality;
- Less-experienced analysts receive useful guidance and review support.
This job description outlines the general nature and level of work performed by employees within this classification and is not intended to be a comprehensive inventory of all duties and responsibilities. Additionally, the responsibility to possess the necessary employment documents for this country rests with the candidate.
What We Offer
You will find here not only an environment where you can do meaningful work and feel supported, but also a benefits package designed to foster your growth and well-being:
- Soft skills and technical training for current and emerging products and technologies;
- Mentoring programs that connect you with mentors from around the world;
- Employee Assistance Programs to support your well-being, both personally and professionally;
- Career development opportunities to grow within the team;
- Special referral bonuses for recommending friends;
- A friendly team eager to welcome you.
About Us
Stefanini is a Brazilian multinational company with 39 years of experience and presence in 41 countries. With more than 35,000 employees, we co-create solutions for a better future, driving digital transformation with a focus on real results.
We operate in an integrated way through 7 specialized business units: Consulting (Technology and Business Agility), Analytics & AI, Banking & Payments, Cybersecurity, Manufacturing 4.0, and Digital Marketing. We are a group that breathes collaboration and offers a dynamic environment where you will learn by doing, grow alongside the team, and have space to contribute with ideas and projects.
If you are looking for a place to develop, innovate, and be part of something bigger, then Stefanini is your place.
Our Commitment To Inclusion And Fairness
At Stefanini, we are fostering a workplace where it is safe to express oneself, and everyone is treated with dignity, respect, and fairness. We welcome people of all backgrounds, regardless of race, ethnicity, color, nationality, gender, gender identity or expression, sexual orientation, age, religion, belief, and disability.
Every individual is encouraged to be their authentic self, as diverse perspectives strengthen our teams, drive innovation, and contribute to our success.
Our recruitment process is designed to be fair, consistent, and inclusive. We act in a transparent and fair manner in our employment practices, ensuring that all employees receive equitable compensation for their contributions, regardless of their background.
What's Next
It's best to apply today because job postings can be taken down, and we wouldn't want you to miss this opportunity. In case you need further information, just send us a message at [email protected], and we'll be happy to assist!
- 3-5 years of relevant experience in application security, security operations, incident response, vulnerability management, penetration testing, or a related cybersecurity role;
- Practical experience investigating security alerts and incidents using SIEM or log-management platforms;
- Ability to correlate telemetry from multiple sources and establish incident scope, timeline, and likely impact;
- Strong understanding of web application and API security, including the OWASP Top 10 and common attack techniques;
- Experience validating and prioritizing findings from SAST, DAST, vulnerability scanners, penetration tests, or bug bounty reports;
- Experience using tools such as Burp Suite, OWASP ZAP, or equivalent tools;
- Practical scripting ability in Python, Bash, or a similar language;
- Demonstrated ability to write clear runbooks and improve them using lessons from investigations;
- Strong analytical, critical-thinking, communication, and stakeholder-management skills;
- Ability to work independently on routine and moderately complex investigations.
Preferred Qualifications
- Experience analyzing WAF, CDN, API gateway, authentication, cloud, or application logs;
- Experience with Elastic, Splunk, Microsoft Sentinel, Chronicle, or an equivalent SIEM platform;
- Familiarity with CVSS, OWASP risk-rating methods, CWE, or similar frameworks;
- Exposure to bug bounty, threat hunting, digital forensics, or purple-team activities;
- Relevant certifications such as Security+, GCIH, GCIA, GWAPT, OSWA, or equivalent practical experience.
What Success Looks Like
- Alerts and incidents are independently triaged and investigated within agreed targets;
- Findings and escalations contain clear evidence, context, and risk assessments;
- Vulnerabilities are accurately validated, prioritised, and tracked through closure;
- Runbooks and scripts reduce repetitive work and improve investigation consistency;
- Investigation lessons result in measurable improvements to procedures and alert quality;
- Less-experienced analysts receive useful guidance and review support.
This job description outlines the general nature and level of work performed by employees within this classification and is not intended to be a comprehensive inventory of all duties and responsibilities. Additionally, the responsibility to possess the necessary employment documents for this country rests with the candidate.
What We Offer
You will find here not only an environment where you can do meaningful work and feel supported, but also a benefits package designed to foster your growth and well-being:
- Soft skills and technical training for current and emerging products and technologies;
- Mentoring programs that connect you with mentors from around the world;
- Employee Assistance Programs to support your well-being, both personally and professionally;
- Career development opportunities to grow within the team;
- Special referral bonuses for recommending friends;
- A friendly team eager to welcome you.
About Us
Stefanini is a Brazilian multinational company with 39 years of experience and presence in 41 countries. With more than 35,000 employees, we co-create solutions for a better future, driving digital transformation with a focus on real results.
We operate in an integrated way through 7 specialized business units: Consulting (Technology and Business Agility), Analytics & AI, Banking & Payments, Cybersecurity, Manufacturing 4.0, and Digital Marketing. We are a group that breathes collaboration and offers a dynamic environment where you will learn by doing, grow alongside the team, and have space to contribute with ideas and projects.
If you are looking for a place to develop, innovate, and be part of something bigger, then Stefanini is your place.
Our Commitment To Inclusion And Fairness
At Stefanini, we are fostering a workplace where it is safe to express oneself, and everyone is treated with dignity, respect, and fairness. We welcome people of all backgrounds, regardless of race, ethnicity, color, nationality, gender, gender identity or expression, sexual orientation, age, religion, belief, and disability.
Every individual is encouraged to be their authentic self, as diverse perspectives strengthen our teams, drive innovation, and contribute to our success.
Our recruitment process is designed to be fair, consistent, and inclusive. We act in a transparent and fair manner in our employment practices, ensuring that all employees receive equitable compensation for their contributions, regardless of their background.
What's Next
It's best to apply today because job postings can be taken down, and we wouldn't want you to miss this opportunity. In case you need further information, just send us a message at [email protected], and we'll be happy to assist!