Application Security Analyst

Job Title: Application Security Analyst
Location: Bogotá, Colombia (Remote)

Duration: + Months


Primary Responsibilities:

• Monitor and Analyze Vulnerabilities

o Use established scanning tools and processes to identify security issues in mobile and web applications.

o Review scan results, verify risk levels, and recommend remediation strategies to application or engineering teams.

• Contribute to Security Assessments

o Participate in ongoing risk-based discussions with product owners, third-party engineers, and other stakeholders about application vulnerabilities.

o Help track and prioritize vulnerabilities according to established timelines and business impact.

• Maintain Scanning Profiles & Policies

o Follow and apply existing application security scan profiles and policies (containers, SAST, DAST, and crowd-sourced pen testing).

o Onboard new applications into scanning services and ensure adherence to brand-wide security standards.

• Collaborate on Awareness & Best Practices

o Support awareness campaigns and training programs to ensure application development teams follow existing security standards (, CLient Global Technology Risk Management).

o Provide input to engineering teams on secure coding and design principles, referencing frameworks like the OWASP Top .

• Vulnerability Monitoring & Remediation Support

o Continuously monitor published vulnerabilities across various applications, operating systems, and databases.

o Assist in determining remediation priorities, coordinate with stakeholders, and re-scan to verify fixes.

o Collaborate with engineers for threat modeling and incident response, offering analytic support in root cause analysis.

• Incident Response Collaboration

o Work with incident response teams to investigate security incidents affecting applications.

o Help document findings, track remediation progress, and apply lessons learned to future prevention activities.


Basic Qualifications

Bachelor’s degree and at least years of combined experience in cybersecurity and/or software development.

(Equivalent experience may be considered in lieu of a degree.)

Practical understanding of application cybersecurity vulnerabilities, the ability to assess their relevance, and experience planning remediation efforts.

Strong communication skills to collaborate with technical personnel and third parties on vulnerability findings.

Familiarity with continuous integration/continuous delivery (CI/CD) platforms.

Awareness of compliance and data privacy regulations (, PCI DSS, GDPR, CCPA) and their impact on application security.

General knowledge of common programming languages and paradigms (OOP, functional, concurrent, etc.).

Technical Qualifications

Understanding of cloud environment security concepts (secrets management, infrastructure as code, serverless).

Familiarity with CI/CD build/deployment pipeline technologies.

Experience with application scanning tools (dynamic and static techniques) to interpret vulnerabilities and support remediation.

Basic knowledge of containers and container management tools (, Docker, Kubernetes), with the ability to recognize security findings and escalate them to engineering for remediation.

Awareness of package management tools (npm, pip, apt, yum) for operating systems or development languages



“