Security Application Analyst

OverviewIn this role you will help secure customer-facing applications within a regulated betting environment.You will work with the Sofia cybersecurity team to integrate security into Agile development, focusing on vulnerability management, code reviews, and compliance.You’ll bridge development and security across Java, .NET, Python, and PHP stacks, addressing risk and threats.This position offers impact at scale in global cybersecurity operations, with a practical DevSecOps focus and opportunities to shape secure coding practices.Compensaciones / BeneficiosCompetitive salaryhybrid work in Sofias tech hubgrowth in global cybersecurity operationsResponsabilidadesPerform SAST, DAST, and penetration testing using Checkmarx, Burp Suite, OWASP ZAP, and SnykReview code, manage software composition analysis for third-party libraries, and embed security into CI/CD pipelines using Jenkins or Azure DevOpsInvestigate security incidents, support SOC operations, and ensure PCI DSS/ISO compliance while educating developers on OWASP Top 10 risksRequisitos principales3+ years in software development (Java, .NET, Python, PHP) with transition to application securityProficiency with SAST/DAST tools (SonarQube, Veracode, Semgrep), WAF configuration, and runtime monitoring (Contrast Security)Knowledge of secure frameworks (Spring, ASP.NET), Unix systems, and regulated industry standardsproblem-solvingteam collaborationeffective communicationSAST/DAST tooling (Checkmarx, Burp Suite, OWASP ZAP, Snyk, SonarQube, Veracode, Semgrep)CI/CD security integration (Jenkins, Azure DevOps, GitHub Actions)runtime application security (Contrast Security)

OverviewIn this role you will help secure customer-facing applications within a regulated betting environment.