{"id":3341248,"url":"https://alion.io/job/stefanini-emea-application-security-analyst","title":"Application Security Analyst","company":{"id":4425653,"name":"Stefanini EMEA","domain":"stefanini.ro","url":"https://alion.io/company/stefanini-ro","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartSearch","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bucharest, Romania"],"countries":["RO"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":23000,"max_usd":57000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"API Gateway","optional":true},{"name":"CVSS","optional":true},{"name":"CWE","optional":true},{"name":"Microsoft Sentinel","optional":true},{"name":"Splunk","optional":true}],"status":"closed","first_seen_at":"2026-10-27T12:00:00Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-30T15:07:20Z","board_verified":false,"closed_at":"2026-10-30T15:07:20Z","days_open":3,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":3},"description":"About the role\n\n We are looking for an Application Security Analyst to identify, investigate, and help reduce security risks affecting our applications and APIs.\nYou will independently triage alerts, investigate potential incidents, validate vulnerabilities, and communicate risk to relevant stakeholders. You will also improve runbooks and write scripts that make recurring analysis and response work faster and more consistent.\nKey Responsibilities\n\nSecurity monitoring and incident response:\nMonitor and triage application-security alerts from SIEM, WAF, application, API, and related telemetry;\nIndependently validate alerts, gather evidence, identify affected assets, assess potential impact, and assign priorities;\nInvestigate incidents by correlating logs, reconstructing timelines, testing hypotheses, and identifying suspicious or malicious activity;\nDetermine incident scope and likely impact and recommend immediate containment or risk-reduction actions;\nMaintain accurate records covering evidence, decisions, risk assessments, handovers, and escalation context;\nEscalate complex forensic analysis and remediation activities to the appropriate specialists;\nParticipate in an incident-response rota or other agreed response duties where required.\nVulnerability analysis and triage\nTriage findings from security tools, penetration tests, bug bounty reports, incident investigations, and external disclosures;\nValidate whether vulnerabilities are reproducible and determine whether there is evidence of exploitation;\nPrioritize findings using severity, exploitability, exposure, affected data, business criticality, and compensating controls;\nProduce actionable findings that explain the issue, evidence, potential business impact, priority, and recommended next steps;\nTrack remediation, ageing, exceptions, recurrence, and risk decisions through closure;\nIdentify recurring vulnerability patterns and recommend improvements to procedures, guidance, or detection coverage.\nRunbooks, scripting, and process improvement:\nWrite, maintain, and test runbooks, standard operating procedures, investigation checklists, query guides, and handover procedures;\nWrite Python, Bash, or similar scripts to automate repetitive analysis, data enrichment, evidence collection, alert validation, and reporting;\nReview investigations to identify gaps in procedures, telemetry, and escalation paths;\nImprove alert quality by documenting false-positive patterns, missing context, and tuning opportunities;\nParticipate in tabletop exercises, case reviews, and post-incident improvement activities;\nSupport less-experienced analysts through peer review and practical knowledge sharing.\nReporting and stakeholder collaboration:\nCommunicate investigation results and security risks clearly to technical and non-technical stakeholders;\nWork with application owners and specialists to validate findings, agree next steps, and track risks through closure;\nProduce metrics and reports covering alert volumes, investigation outcomes, vulnerability trends, and remediation performance.\n3-5 years of relevant experience in application security, security operations, incident response, vulnerability management, penetration testing, or a related cybersecurity role;\nPractical experience investigating security alerts and incidents using SIEM or log-management platforms;\nAbility to correlate telemetry from multiple sources and establish incident scope, timeline, and likely impact;\nStrong understanding of web application and API security, including the OWASP Top 10 and common attack techniques;\nExperience validating and prioritizing findings from SAST, DAST, vulnerability scanners, penetration tests, or bug bounty reports;\nExperience using tools such as Burp Suite, OWASP ZAP, or equivalent tools;\nPractical scripting ability in Python, Bash, or a similar language;\nDemonstrated ability to write clear runbooks and improve them using lessons from investigations;\nStrong analytical, critical-thinking, communication, and stakeholder-management skills;\nAbility to work independently on routine and moderately complex investigations.\nPreferred Qualifications\nExperience analyzing WAF, CDN, API gateway, authentication, cloud, or application logs;\nExperience with Elastic, Splunk, Microsoft Sentinel, Chronicle, or an equivalent SIEM platform;\nFamiliarity with CVSS, OWASP risk-rating methods, CWE, or similar frameworks;\nExposure to bug bounty, threat hunting, digital forensics, or purple-team activities;\nRelevant certifications such as Security+, GCIH, GCIA, GWAPT, OSWA, or equivalent practical experience.\nWhat Success Looks Like\nAlerts and incidents are independently triaged and investigated within agreed targets;\nFindings and escalations contain clear evidence, context, and risk assessments;\nVulnerabilities are accurately validated, prioritised, and tracked through closure;\nRunbooks and scripts reduce repetitive work and improve investigation consistency;\nInvestigation lessons result in measurable improvements to procedures and alert quality;\nLess-experienced analysts receive useful guidance and review support.\nThis job description outlines the general nature and level of work performed by employees within this classification and is not intended to be a comprehensive inventory of all duties and responsibilities. Additionally, the responsibility to possess the necessary employment documents for this country rests with the candidate.\nWhat We Offer\nYou will find here not only an environment where you can do meaningful work and feel supported, but also a benefits package designed to foster your growth and well-being:\nSoft skills and technical training for current and emerging products and technologies;\nMentoring programs that connect you with mentors from around the world;\nEmployee Assistance Programs to support your well-being, both personally and professionally;\nCareer development opportunities to grow within the team;\nSpecial referral bonuses for recommending friends;\nA friendly team eager to welcome you.\nAbout Us\nStefanini is a Brazilian multinational company with 39 years of experience and presence in 41 countries. With more than 35,000 employees, we co-create solutions for a better future, driving digital transformation with a focus on real results.\nWe operate in an integrated way through 7 specialized business units: Consulting (Technology and Business Agility), Analytics & AI, Banking & Payments, Cybersecurity, Manufacturing 4.0, and Digital Marketing. We are a group that breathes collaboration and offers a dynamic environment where you will learn by doing, grow alongside the team, and have space to contribute with ideas and projects.\nIf you are looking for a place to develop, innovate, and be part of something bigger, then Stefanini is your place.\nOur Commitment To Inclusion And Fairness\nAt Stefanini, we are fostering a workplace where it is safe to express oneself, and everyone is treated with dignity, respect, and fairness. We welcome people of all backgrounds, regardless of race, ethnicity, color, nationality, gender, gender identity or expression, sexual orientation, age, religion, belief, and disability.\nEvery individual is encouraged to be their authentic self, as diverse perspectives strengthen our teams, drive innovation, and contribute to our success.\nOur recruitment process is designed to be fair, consistent, and inclusive. We act in a transparent and fair manner in our employment practices, ensuring that all employees receive equitable compensation for their contributions, regardless of their background.\nWhat's Next\nIt's best to apply today because job postings can be taken down, and we wouldn't want you to miss this opportunity. In case you need further information, just send us a message at , and we'll be happy to assist!\n3-5 years of relevant experience in application security, security operations, incident response, vulnerability management, penetration testing, or a related cybersecurity role;\nPractical experience investigating security alerts and incidents using SIEM or log-management platforms;\nAbility to correlate telemetry from multiple sources and establish incident scope, timeline, and likely impact;\nStrong understanding of web application and API security, including the OWASP Top 10 and common attack techniques;\nExperience validating and prioritizing findings from SAST, DAST, vulnerability scanners, penetration tests, or bug bounty reports;\nExperience using tools such as Burp Suite, OWASP ZAP, or equivalent tools;\nPractical scripting ability in Python, Bash, or a similar language;\nDemonstrated ability to write clear runbooks and improve them using lessons from investigations;\nStrong analytical, critical-thinking, communication, and stakeholder-management skills;\nAbility to work independently on routine and moderately complex investigations.\nPreferred Qualifications\nExperience analyzing WAF, CDN, API gateway, authentication, cloud, or application logs;\nExperience with Elastic, Splunk, Microsoft Sentinel, Chronicle, or an equivalent SIEM platform;\nFamiliarity with CVSS, OWASP risk-rating methods, CWE, or similar frameworks;\nExposure to bug bounty, threat hunting, digital forensics, or purple-team activities;\nRelevant certifications such as Security+, GCIH, GCIA, GWAPT, OSWA, or equivalent practical experience.\nWhat Success Looks Like\nAlerts and incidents are independently triaged and investigated within agreed targets;\nFindings and escalations contain clear evidence, context, and risk assessments;\nVulnerabilities are accurately validated, prioritised, and tracked through closure;\nRunbooks and scripts reduce repetitive work and improve investigation consistency;\nInvestigation lessons result in measurable improvements to procedures and alert quality;\nLess-experienced analysts receive useful guidance and review support.\nThis job description outlines the general nature and level of work performed by employees within this classification and is not intended to be a comprehensive inventory of all duties and responsibilities. Additionally, the responsibility to possess the necessary employment documents for this country rests with the candidate.\nWhat We Offer\nYou will find here not only an environment where you can do meaningful work and feel supported, but also a benefits package designed to foster your growth and well-being:\nSoft skills and technical training for current and emerging products and technologies;\nMentoring programs that connect you with mentors from around the world;\nEmployee Assistance Programs to support your well-being, both personally and professionally;\nCareer development opportunities to grow within the team;\nSpecial referral bonuses for recommending friends;\nA friendly team eager to welcome you.\nAbout Us\nStefanini is a Brazilian multinational company with 39 years of experience and presence in 41 countries. With more than 35,000 employees, we co-create solutions for a better future, driving digital transformation with a focus on real results.\nWe operate in an integrated way through 7 specialized business units: Consulting (Technology and Business Agility), Analytics & AI, Banking & Payments, Cybersecurity, Manufacturing 4.0, and Digital Marketing. We are a group that breathes collaboration and offers a dynamic environment where you will learn by doing, grow alongside the team, and have space to contribute with ideas and projects.\nIf you are looking for a place to develop, innovate, and be part of something bigger, then Stefanini is your place.\nOur Commitment To Inclusion And Fairness\nAt Stefanini, we are fostering a workplace where it is safe to express oneself, and everyone is treated with dignity, respect, and fairness. We welcome people of all backgrounds, regardless of race, ethnicity, color, nationality, gender, gender identity or expression, sexual orientation, age, religion, belief, and disability.\nEvery individual is encouraged to be their authentic self, as diverse perspectives strengthen o...","description_format":"text","description_chars":12571,"description_truncated":true,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Mentoring programs"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","IT Help Desk & Service Desk","Managed Security","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-10-27T15:34:03Z"},{"event":"close","at":"2026-10-30T15:07:20Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/stefanini-emea-application-security-analyst","json_url":"https://alion.io/job/stefanini-emea-application-security-analyst.json","meta":{"generated_at":"2026-11-01T14:28:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22199,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4425653},"rest":"https://alion.io/mcp/rest/get_company?id=4425653"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstefanini-emea-application-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstefanini-emea-application-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstefanini-emea-application-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/stefanini-emea-application-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstefanini-emea-application-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3341248}},{"tool":"search_jobs","arguments":{"company":"stefanini.ro","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3341248},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}