{"id":3341249,"url":"https://alion.io/job/stefanini-emea-senior-application-security-analyst","title":"Senior Application Security Analyst","company":{"id":4425653,"name":"Stefanini EMEA","domain":"stefanini.ro","url":"https://alion.io/company/stefanini-ro","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartSearch","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bucharest, Romania"],"countries":["RO"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":32000,"max_usd":73000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"API Gateway","optional":true},{"name":"CVSS","optional":true},{"name":"CWE","optional":true},{"name":"MITRE ATT&CK","optional":true}],"status":"live","first_seen_at":"2026-10-27T12:00:00Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-30T15:07:20Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"We are looking for a Senior Application Security Analyst to lead complex application-security investigations and improve the services, processes, and practices used to manage application risk.\nYou will handle high-complexity incidents and vulnerability cases, guide other analysts, coordinate investigations across multiple stakeholders, and drive improvements to runbooks, telemetry, alert quality, and operational performance.\nMain responsibilities:\nComplex investigations and incident leadership\n\nLead high-complexity investigations involving applications, APIs, authentication systems, and internet-facing services\nForm and test investigation hypotheses by correlating telemetry across multiple systems and data sources\nEstablish incident scope, timeline, root cause, attack path, affected assets, and potential business impact\nCoordinate evidence gathering, analysis, handovers, and specialist contributions during significant incidents\nRecommend containment and risk-reduction actions and provide clear technical context for decision-makers\nReview investigation quality, risk assessments, and closure decisions for significant cases.\nParticipate in or lead incident-response duties where required.\nAdvanced vulnerability analysis\n\nLead the validation and prioritization of complex or high-impact findings from security testing, bug bounty, incident response, and external disclosures\nAssess exploitability, attack chains, exposure, asset criticality, affected data, and compensating controls\nIdentify patterns across incidents and vulnerabilities and recommend measures that address recurring root causes\nResolve ambiguous or disputed findings by presenting clear evidence and risk-based reasoning\nGuide stakeholders through difficult prioritization, escalation, and risk-acceptance decisions.\nService and process improvement\n\nOwn and improve investigation procedures, runbooks, escalation paths, quality standards, and case-review practices\nIdentify gaps in telemetry and investigation capability and define clear requirements for the teams responsible for addressing them\nDrive improvements to alert fidelity, investigation efficiency, reporting quality, and operational coverage\nDevelop advanced scripts, queries, and analytical methods for complex investigations and recurring use cases\nLead tabletop exercises, case reviews, and post-incident improvement activities\nUse operational metrics and investigation outcomes to prioritize service improvements.\nTechnical leadership and collaboration\n\nAct as a senior subject-matter expert for application-security investigations and vulnerability analysis\nMentor analysts and improve team capability through coaching, peer review, and knowledge sharing\nCommunicate complex technical findings and uncertainty clearly to technical and non-technical stakeholders\nCoordinate work across application owners, incident responders, security specialists, and leadership\nRepresent the application-security analysis function in complex cross-team discussions.\n5-8 years of relevant experience in application security, incident response, security operations, vulnerability research, penetration testing, or a related cybersecurity role\nExtensive experience leading complex security investigations using SIEM and other telemetry platforms\nAdvanced ability to correlate data across multiple sources, reconstruct attack timelines, and determine root cause and business impact\nDeep understanding of web application and API security, common attack techniques, and defensive controls\nStrong experience validating complex vulnerabilities, attack chains, and evidence of exploitation\nAdvanced proficiency with web-security and investigation tools such as Burp Suite, OWASP ZAP, Elastic, Splunk, or equivalent platforms\nStrong scripting capability in Python, Bash, or a similar language for investigation and operational automation\nDemonstrated experience creating and improving runbooks, analytical methods, and incident-response processes\nStrong critical-thinking skills and the ability to make risk-based decisions with incomplete or ambiguous information\nDemonstrated ability to lead investigations, mentor analysts, and influence stakeholders across organizational boundaries\nExcellent written and verbal communication skills.\nPreferred qualifications\n\nExperience with large-scale WAF, CDN, API gateway, authentication, cloud, or application telemetry\nExperience with threat hunting, digital forensics, incident command, or purple-team activities\nExperience developing investigation metrics, quality controls, or operational service reviews\nFamiliarity with CVSS, OWASP risk-rating methods, CWE, MITRE ATT&CK, or equivalent frameworks\nRelevant certifications such as GCIH, GCIA, GWAPT, GXPN, OSCP, OSWE, or equivalent practical experience.\nWhat success looks like\n\nComplex incidents and vulnerabilities are handled with clear technical leadership and sound risk decisions\nInvestigations produce defensible conclusions on scope, impact, root cause, and required action\nAnalysts receive effective technical guidance and improve their independence over time\nRunbooks, analytical methods, and quality standards improve based on operational evidence\nAlert quality and investigation efficiency show measurable improvement\nSenior stakeholders receive clear, timely, and decision-ready security analysis.\nThis job description outlines the general nature and level of work performed by employees within this classification and is not intended to be a comprehensive inventory of all duties and responsibilities. Additionally, the responsibility to possess the necessary employment documents for this country rests with the candidate.\nWhat we offer:\nYou will find here not only an environment where you can do meaningful work and feel supported, but also a benefits package designed to foster your growth and wellbeing:\nSoft skills and technical training for current and emerging products and technologies\nMentoring programs that connect you with mentors from around the world\nEmployee Assistance Programs to support your wellbeing, both personally and professionally\nCareer development opportunities to grow within the team\nSpecial referral bonuses for recommending friends\nA friendly team eager to welcome you.\nAbout us:\nStefanini is a Brazilian multinational company with 39 years of experience and presence in 41 countries. With more than 35,000 employees, we co-create solutions for a better future, driving digital transformation with a focus on real results.\nWe operate in an integrated way through 7 specialized business units: Consulting (Technology and Business Agility), Analytics & AI, Banking & Payments, Cybersecurity, Manufacturing 4.0, and Digital Marketing. We are a group that breathes collaboration and offers a dynamic environment where you will learn by doing, grow alongside the team, and have space to contribute with ideas and projects.\nIf you are looking for a place to develop, innovate, and be part of something bigger, then Stefanini is your place.\nOur commitment to inclusion and fairness:\nAt Stefanini, we are fostering a workplace where it is safe to express oneself and everyone is treated with dignity, respect, and fairness. We welcome people of all backgrounds, regardless of race, ethnicity, color, nationality, gender, gender identity or expression, sexual orientation, age, religion, belief and disability.\nEvery individual is encouraged to be their authentic self, as diverse perspectives strengthen our teams, drive innovation, and contribute to our success.\nOur recruitment process is designed to be fair, consistent, and inclusive. We act in a transparent and fair manner in our employment practices, ensuring that all employees receive equitable compensation for their contributions, regardless of their background.\nWhat's next:\nIt's best to apply today, because job postings can be taken down and we wouldn't want you to miss this opportunity. In case you need further information, just send us a message at  and we'll be happy to assist!\n5-8 years of relevant experience in application security, incident response, security operations, vulnerability research, penetration testing, or a related cybersecurity role\nExtensive experience leading complex security investigations using SIEM and other telemetry platforms\nAdvanced ability to correlate data across multiple sources, reconstruct attack timelines, and determine root cause and business impact\nDeep understanding of web application and API security, common attack techniques, and defensive controls\nStrong experience validating complex vulnerabilities, attack chains, and evidence of exploitation\nAdvanced proficiency with web-security and investigation tools such as Burp Suite, OWASP ZAP, Elastic, Splunk, or equivalent platforms\nStrong scripting capability in Python, Bash, or a similar language for investigation and operational automation\nDemonstrated experience creating and improving runbooks, analytical methods, and incident-response processes\nStrong critical-thinking skills and the ability to make risk-based decisions with incomplete or ambiguous information\nDemonstrated ability to lead investigations, mentor analysts, and influence stakeholders across organizational boundaries\nExcellent written and verbal communication skills.\nPreferred qualifications\n\nExperience with large-scale WAF, CDN, API gateway, authentication, cloud, or application telemetry\nExperience with threat hunting, digital forensics, incident command, or purple-team activities\nExperience developing investigation metrics, quality controls, or operational service reviews\nFamiliarity with CVSS, OWASP risk-rating methods, CWE, MITRE ATT&CK, or equivalent frameworks\nRelevant certifications such as GCIH, GCIA, GWAPT, GXPN, OSCP, OSWE, or equivalent practical experience.\nWhat success looks like\n\nComplex incidents and vulnerabilities are handled with clear technical leadership and sound risk decisions\nInvestigations produce defensible conclusions on scope, impact, root cause, and required action\nAnalysts receive effective technical guidance and improve their independence over time\nRunbooks, analytical methods, and quality standards improve based on operational evidence\nAlert quality and investigation efficiency show measurable improvement\nSenior stakeholders receive clear, timely, and decision-ready security analysis.\nThis job description outlines the general nature and level of work performed by employees within this classification and is not intended to be a comprehensive inventory of all duties and responsibilities. Additionally, the responsibility to possess the necessary employment documents for this country rests with the candidate.\nWhat we offer:\nYou will find here not only an environment where you can do meaningful work and feel supported, but also a benefits package designed to foster your growth and wellbeing:\nSoft skills and technical training for current and emerging products and technologies\nMentoring programs that connect you with mentors from around the world\nEmployee Assistance Programs to support your wellbeing, both personally and professionally\nCareer development opportunities to grow within the team\nSpecial referral bonuses for recommending friends\nA friendly team eager to welcome you.\nAbout us:\nStefanini is a Brazilian multinational company with 39 years of experience and presence in 41 countries. With more than 35,000 employees, we co-create solutions for a better future, driving digital transformation with a focus on real results.\nWe operate in an integrated way through 7 specialized business units: Consulting (Technology and Business Agility), Analytics & AI, Banking & Payments, Cybersecurity, Manufacturing 4.0, and Digital Marketing. We are a group that breathes collaboration and offers a dynamic environment where you will learn by doing, grow alongside the team, and have space to contribute with ideas and projects.\nIf you are looking for a place to develop, innovate, and be part of something...","description_format":"text","description_chars":13073,"description_truncated":true,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Mentoring programs"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","IT Help Desk & Service Desk","Managed Security","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-10-27T15:34:03Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":25,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/stefanini-emea-senior-application-security-analyst","json_url":"https://alion.io/job/stefanini-emea-senior-application-security-analyst.json","meta":{"generated_at":"2026-10-30T16:08:44Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4187,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4425653},"rest":"https://alion.io/mcp/rest/get_company?id=4425653"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstefanini-emea-senior-application-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstefanini-emea-senior-application-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstefanini-emea-senior-application-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/stefanini-emea-senior-application-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstefanini-emea-senior-application-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3341249}},{"tool":"search_jobs","arguments":{"company":"stefanini.ro","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3341249},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}