We are looking for a motivated Junior Functional Security Analyst with a strong interest in new technologies and application security.

You will join a dynamic team responsible for addressing application security challenges in solutions developed for our clients. Working closely with functional analysts, developers, architects, and cybersecurity specialists, you will develop your expertise in secure software development.

With support from experienced team members, you will help translate business needs into clear functional and security requirements throughout the application development lifecycle.

Your responsibilities will include:

• Supporting the preparation of functional and technical specifications related to application security.
• Contributing to the definition and implementation of the Secure Development Lifecycle (SDL), based on industry standards and NIST best practices.
• Working with development teams to integrate appropriate security controls throughout the application lifecycle.
• Helping verify compliance with applicable security standards, internal policies, and regulations.
• Keeping up to date with emerging vulnerabilities, threats, and application security practices.
• Contributing to security awareness initiatives for internal teams.
• Assisting with the preparation, coordination, and follow-up of application security testing.
• Monitoring software vulnerabilities and helping identify potential risks to applications.
• Reviewing vulnerability reports from internal and external sources, such as vulnerability databases and security assessment tools.
• Documenting findings and helping communicate security risks clearly to both technical and non-technical stakeholders.

Profile

You hold a degree in computer science, cybersecurity, information systems, or a related field, or have gained equivalent knowledge through relevant training or practical experience.

You may be a recent graduate or have initial professional experience in functional analysis, software development, IT, or cybersecurity. You are curious, analytical, eager to learn, and interested in building your career in application security.

We are looking for someone who:

• Has a basic understanding of software development processes, such as Agile or DevOps.
• Has introductory knowledge of application security principles and standards, such as OWASP, NIST, or ASVS.
• Is able to understand technical topics and translate them into clear requirements or documentation.
• Enjoys working with multidisciplinary teams, including developers, architects, analysts, and security specialists.
• Has good written and verbal communication skills.
• Is organized, detail-oriented, and comfortable asking questions.
• Is willing to learn about vulnerability management, secure software development, and threat modeling.
• Has a basic understanding of concepts such as authentication, access control, encryption, and software vulnerabilities.
• Has some familiarity with application lifecycle and development tools, such as Jira, Git, or Jenkins.
• Knowledge of the following topics is considered an advantage, but is not required:
• Software Bills of Materials (SBOM) and formats such as CycloneDX or SPDX.
• Vulnerability management tools such as Dependency-Track.
• Vulnerability scoring and prioritization methods such as CVSS and EPSS.
• Security frameworks such as ISO 27001.
• Threat modeling and secure software architecture principles.
• Application security testing approaches and tools, including SAST and DAST.
• Above all, you are enthusiastic about application security and motivated to grow in a supportive, fast-evolving environment where security plays a critical role.