Application Security Analyst

2 days ago

Belgrade, Central Serbia First Line Software Пуно радно време


About the Company
First Line Software works with some of the world's top businesses and organizations in industries like healthcare, data engineering, warehouse automation, retail digitalization, mobile app development, and e-commerce. Our projects are as varied as our people, and our people are as talented as they come. We prefer working as a transparent and supportive team, who shares our knowledge as well as our success. Let's see what we can create together. The relocation to Belgrade (Serbia) OR Valencia (Spain) is mandatory, Relocation support will be provided by company. What you will do:
• Evaluate business requirements and review software architecture through a security lens
• Perform in-depth source code reviews, along with static (SAST) and dynamic (DAST) security testing
• Plan and execute penetration testing across applications and systems
• Partner with development teams to remediate vulnerabilities and strengthen secure coding practices
• Apply deep expertise in secure code review across Java, TypeScript, and JavaScript, staying current with modern application architectures
• Perform security assessments across the full web stack — frontend frameworks, middleware services, and backend APIs — ensuring end‑to‑end coverage of application attack surfaces
• Review and harden API designs, authentication flows, session management, and data exchange patterns used in modern web architectures
• Assess and secure API management platforms (e.g., gateways, service meshes, routing layers), ensuring proper authentication, authorization, rate‑limiting, and policy enforcement across distributed systems What You Bring:
• Bachelor's degree in Cybersecurity, IT, Mathematics, or a related field
• Proven experience in application security, code review, and penetration testing
• Strong secure‑coding and code‑review skills in Java, TypeScript, or JavaScript; experience in C# or C++ is equally valuable due to transferable AppSec principles
• Solid grounding in information security principles, including data protection best practices
• A collaborative mindset and the ability to explain security concepts clearly to development teams
• Strong secure‑coding and code‑review skills in Java, TypeScript, or JavaScript; experience in C# or C++ is equally valuable
• Experience securing modern web applications and APIs, including frontend frameworks, backend services, and distributed API architectures What we can offer:
• A great team of professional and creative engineers, who are empowered to share their experience and knowledge
• Opportunity to work with modern technologies
• About Development: we value the professional growth of our employees, that's why you will have an opportunity to attend a variety of training, conferences, and language courses
• About Support: possibility to work in one of our cozy offices with comfortable workplaces and unlimited coffee and snacks
• About Leisure: we organize various events, quizzes, corporate challenges, etc. We also care about sports activities.