Security Analyst – Application Vulnerability Specialist

About the role

NTT DATA is seeking a Security Analyst to join its global client team remotely from Mexico. The role focuses on assessing and mitigating application vulnerabilities across a range of technologies, ensuring robust security posture for critical software assets.

Key responsibilities

• Execute and support application vulnerability assessments (SAST, DAST, SCA, and manual code review).
• Validate scanner results, perform false‑positive analysis, and track remediation through retesting.
• Prioritize findings using business impact, exploitability, exposure, and CVSS scoring.
• Develop and maintain dashboards and reports on severity distribution, remediation SLAs, and MTTR.
• Integrate security scanning and vulnerability workflows into CI/CD pipelines.
• Provide actionable remediation recommendations and coordinate root‑cause analysis.
• Support threat modeling and application risk assessments, focusing on insecure design patterns.
• Participate in high‑severity or zero‑day response activities and contribute to security policies and standards.

Required profile

• Bachelor’s degree in IT, Cybersecurity, Computer Science or related field, or equivalent experience.
• 5‑7 years of experience in application security and vulnerability management.
• Strong understanding of OWASP Top 10 and secure architecture principles.

Required skills

• SAST, DAST, SCA, manual code review.
• Burp Suite for manual web and API testing.
• CVSS scoring and vulnerability prioritization.
• CI/CD pipeline integration and automation.
• Dashboard creation and vulnerability metrics reporting.
• Threat modeling and application risk assessment.