Junior Application Security Analyst (AppSec)

Description

We are a Software Engineering consultancy with over 15 years of experience in software quality and high technical expertise in test automation, digital security, and DevOps culture. **\_We never stop studying and learning**, as we constantly pursue excellence and development. **\_We value our collaborative environment**, believing in the strength of our team. **\_We act with transparency and respect**, maintaining ethical and moral standards in our relationships with colleagues, partners, and clients. Our team is growing. We have built a results-driven team capable of solving challenging problems. Join us to transform the technology world! **As a Junior AppSec Analyst at PrimeUp, you will:** * Support the execution of source-code security analyses (Secure Code Review), identifying vulnerabilities and deviations from secure development best practices with guidance from the team; * Assist in validating and triaging vulnerabilities identified by SAST, SCA, DAST, and Container Security tools; * Support development teams in understanding and remediating vulnerabilities, following AppSec-defined guidelines and standards; * Participate in vulnerability analysis based on references such as OWASP Top 10, OWASP API Security Top 10, CWE, and CVE; * Assist in operating and administering the application security tools used by the organization; * Support the integration and monitoring of security tools within development processes and CI/CD pipelines; * Participate in vulnerability monitoring, tracking remediation deadlines and security metrics; * Contribute to disseminating secure development best practices across technology teams; * Support activities related to the Secure SDLC (SSDLC), collaborating in implementing security controls throughout the development lifecycle. **To take on this challenge, you must have:** * Up to 2 years of experience in Information Security, Software Development, Infrastructure, or related fields; * Basic knowledge of secure development and application vulnerabilities; * Familiarity with OWASP Top 10 concepts and application security fundamentals; * Basic source-code analysis knowledge in at least one programming language (Java, .NET, JavaScript/TypeScript, Python, or similar); * Familiarity with code versioning tools such as Git; * Basic knowledge of CI/CD pipelines and DevOps concepts; * Ability to quickly learn new technologies and tools; * Strong communication skills and ability to work effectively in a team. **Academically, we expect you to have:** * A completed undergraduate degree in Computer Science, Information Systems, Computer Engineering, Systems Analysis and Development, or related fields. **It would be great if you also have:** * Academic experience, internships, or personal projects related to application security. * Basic knowledge of SAST, DAST, or SCA tools such as Checkmarx, Fortify, SonarQube, Veracode, or Snyk; * Basic knowledge of REST APIs and API security concepts; * Familiarity with Cloud Computing (AWS, Azure, or GCP); * Basic knowledge of containers (Docker) and Kubernetes; * Basic knowledge of Python, PowerShell, or Shell Script for automation; * Advanced English proficiency for reading, writing, and speaking. **Note:** This position is fully remote for candidates outside the metropolitan regions of Rio de Janeiro (RJ) and São Paulo (SP). For residents within the metropolitan regions of RJ and SP, the model is hybrid (one day per week onsite). **As part of the PrimeUp team, you will be entitled to:** * CLT employment contract with market-competitive remuneration; * Meal Allowance; * Food Voucher; * Health Insurance; * Dental Insurance; * Life Insurance; * Annual Bonus Day Off; * Certification Reimbursement; * PrimeUp Academy (professional training network); * Profit and Results Sharing (PLR); * Gym Membership Plan; * Well-being Program offering psychological, social, financial, and legal support. CrcoDOFcd6