Application Security Analyst

The Application Security Analyst at CureMD plays a vital role in protecting our applications, data, and systems from security threats and vulnerabilities. This position offers a valuable opportunity to develop professionally within the application security domain. Working alongside experienced security professionals, you will gain hands-on experience in identifying, assessing, and mitigating security risks to ensure the integrity of our web, mobile, and desktop applications.

Key Responsibilities:
- Conduct comprehensive security assessments to identify vulnerabilities.
- Exploit known vulnerabilities and discover new ones through manual and automated techniques.
- Analyze and audit source code for web and mobile applications to detect security flaws.
- Utilize scripting skills and proficiency in Unix, Linux, and Windows operating systems for security tasks.
- Configure and manage Linux environments, including utilities and programming aspects.
- Perform manual external and internal penetration testing on various platforms.
- Conduct penetration testing and vulnerability assessments for cloud-based applications across web, desktop, and mobile environments.
- Execute static and dynamic code analysis, manual code inspections, threat modeling, and design reviews to uncover security defects.
- Stay updated with the latest ethical hacking methods and continuously evaluate new penetration testing tools.
- Collaborate effectively with team members and stakeholders to address security concerns.
- Support security operations and related tasks as needed.

Required Qualifications:
- Bachelor’s degree in Information/Cyber Security, Information Technology, Computer Science, Software Engineering, or a related field with a focus on Information Security.
- 1 to 2 years of relevant experience in application security or penetration testing.
- Strong understanding of security tools and technologies used in penetration testing.
- Familiarity with multiple coding languages and secure software development practices.
- Experience testing business-critical environments.
- Professional certification such as CEH (Certified Ethical Hacker) or equivalent.
- Solid knowledge of information security principles and applied cryptographic protocols.
- Understanding of security technologies including cryptography, authentication techniques, and protocols.
- Awareness of OWASP Top Ten vulnerabilities and their implications.
- Ability to use various penetration testing tools and methodologies effectively.

Preferred Qualifications and Benefits:

Financial Benefits:
- Competitive salary with bi-annual performance bonuses.
- Fast-track, uncapped career growth opportunities for high performers.
- Company-sponsored vehicle financing options for cars and bikes.
- Interest-free loans available to employees.
- Provident Fund contributions matched by CureMD up to 8% of base salary.

Health and Wellness:
- Access to an in-house clinic staffed by certified male and female doctors, including 24/7 telemedicine services.
- Hospital treatment monitoring by company doctors.
- Comprehensive health coverage for employees and their immediate family, including outpatient, inpatient, maternity, and parental inpatient care.
- Exclusive health benefits and discounts at leading clinics and diagnostic labs.

Supportive Workplace Environment:
- Pick-up and drop-off services specifically for female employees.
- On-site daycare facilities to support working parents.
- In-house gym and recreational areas to promote wellness and relaxation.

Continued Learning and Development:
- Company-sponsored training programs, workshops, development retreats, and paid specialized certifications to enhance skills and career growth.

At CureMD, every team member contributes to transforming healthcare through innovative technology. By joining us, you will help develop solutions that improve patient care, increase healthcare efficiency, and save lives worldwide. Your expertise and dedication will play a key role in delivering impactful, real-time healthcare solutions. Together, we’re not just advancing technology — we’re making a meaningful difference in people’s lives. Together, let’s save lives.