Application Security Analyst

Job Summary    

As an Application Security Analyst, you will play a key role in maintaining our exceptionally high application security standards, established to protect Bottomline’s products and services. This role reports to the Head of Product Security and is responsible for supporting Product teams in our on-going work to identify, assess and mitigate security risks associated with application development and deployment.   
 Essential Functions and Responsibilities:  

• Execute application scanning operations across Web, API, and service-based applications (SAST, DAST, SCA), ensuring consistent and robust coverage across our products and services. 

• Support our penetration testing programme by preparing test inputs, coordinating execution activities 

• Operate and maintain application security tools, including configuration and tuning. 

• Triage, validate, and enrich findings from code scanning and penetration testing outputs, ensuring high-quality, actionable results 

• Collaborate with Development teams to communicate and quantify risks clearly, provide remediation and disposition guidance, and promote secure coding practices 

• Track and report on remediation progress to ensure visibility and alignment with defined risk priorities  

  Required Experience & Qualifications 

• 1-3 years of experience in Application Security 

• Bachelor’s degree in Computer Science, Information Security, or a related field. 

• Proven experience in application security, penetration testing and application vulnerability assessments. 

• Strong understanding of secure coding practices, software development lifecycle (SDLC) and application security frameworks. 

• Knowledge of security tools and technologies such as OWASP, SAST, DAST and SCA 

• Excellent problem-solving skills and attention to detail 

• Strong communication and collaboration skills to work effectively with cross-functional teams. 

 Preferred Experience & Qualifications 

• Cyber certifications (e.g., CISM, CISSP, CEH, GSEC, CASP+, CEH) or equivalent 

Note: This job description is not intended to be an exhaustive list of all duties, responsibilities, or qualifications associated with the position