Application Security Analyst

Key Responsibilities

• Manage and optimize cloud security platforms (CNAPP), including threat detection, vulnerability management, and compliance
• Monitor and respond to security alerts in containerized environments
• Perform Kubernetes security hardening based on industry standards
• Track and remediate vulnerabilities (CVEs) across their lifecycle
• Ensure visibility and security of container images and registries
• Collaborate with DevOps teams to integrate security into infrastructure and deployment pipelines
• Create documentation, playbooks, and security guidelines

Requirements

• ~2+ years of experience in cybersecurity, preferably in cloud-native or microservices environments
• Hands-on experience with CNAPP tools (e.g., Wiz, Prisma Cloud, Aqua, Sysdig)
• Strong understanding of container security (image scanning, runtime protection, supply chain risks)
• Bachelor's degree in a relevant field
• Fluent in English and Cantonese
• Experience with DevSecOps and CI/CD security (SAST, DAST, container scanning)
• Knowledge of IaC security (e.g., Terraform)
• Familiarity with OWASP Top 10 and API security
• Understanding of authentication mechanisms (OAuth2, JWT, mTLS)