Security Analyst

This is a unique opportunity to join an exciting early-stage startup experiencing hypergrowth in a white-hot segment of the cybersecurity space.

Cycode is a rapidly growing cybersecurity startup and creator of the world’s first complete Application Security Posture Management platform to protect against software supply chain risks. According to Gartner, software supply chain attacks (like the one that impacted Solarwinds) will affect 45% of organizations and grow three-fold by 2025. Unfortunately, traditional AppSec offers little protection against these devastating threats. That’s where Cycode comes in. Our platform provides customers with complete visibility, prioritization, and remediation across all phases of the software development lifecycle (SDLC) — to prevent them from becoming the next SolarWinds.

As a security analyst, you will be part of the SAST team, which oversees the SAST engine, the overall SAST product, and the developer experience across various scanners. A key responsibility within SAST is building and maintaining language support for the SAST engine.

Responsibilities

• Conduct evaluations and enhancements of our static code analysis tool's security scope by identifying new patterns of vulnerability.
• Contribute to additional language support of our static code analysis solution and improve existing ones.
• Review and create test cases for vulnerable code patterns.
• Contribute to the development and refinement of internal tools for assessing and benchmarking our solution.
• Develop comprehensive benchmarks to effectively compare our solution with alternate offerings.
• Enhance and maintain the documentation.
• Provide assistance to the sales team through customer feedback and enhancement requests.
  
  

• 3+ years of experience in software development.
• 1+ years experience in security-oriented code reviews, encompassing key Application Security Frameworks such as OWASP Top 10, PCI-DSS, and similar standards.
• Exposure to at least two major programming languages, including JavaScript, Python, Go, Java, and C#.
• Strong technical aptitude, with a proven ability to quickly grasp complex technical concepts.
• Demonstrates a proactive approach in detecting problems and identifying areas for enhancement
• Highly self-motivated and driven individual.
• Analytical and detail oriented
• Good writing & oral communication skills.
• Fluent in English.