Junior Application Security Analyst (Consultant)

About the role

Akkodis is looking for a Junior Application Security Analyst to support a leading Canadian enterprise on a 6‑month contract. The role focuses on enhancing application security and DevSecOps practices across web, mobile, and API projects, primarily delivered remotely with occasional onsite meetings in Toronto.

Key responsibilities

• Administer and operate application security platforms such as SAST, DAST, SCA and Mobile Application Security Testing (MAST) tools.
• Review vulnerability assessment results, provide remediation guidance and support vulnerability management activities.
• Assist with security tool tuning, upgrades, and optimization based on penetration testing findings.
• Create and maintain security metrics, dashboards, KPIs and KRIs.
• Educate development teams on OWASP Top 10 vulnerabilities for web, mobile and API applications.
• Automate repetitive security tasks and support secure software delivery within CI/CD pipelines.
• Provide operational support for web and mobile applications, including issue analysis, resolution and documentation.

Required profile

• 2–5 years of experience in application security, cybersecurity or a related information‑security role.
• Hands‑on experience with at least one application security platform (SAST, DAST, SCA or MAST).
• Solid understanding of DevSecOps principles, Agile delivery and the secure software development lifecycle.
• Familiarity with OWASP Top 10 (Web, Mobile, APIs) and common application security vulnerabilities.
• Experience reviewing vulnerability findings and collaborating with development teams on remediation.
• Programming or software development background (Java, C++.NET or similar).
• Strong analytical, troubleshooting, documentation and communication skills.

Required skills

• SAST
• DAST
• SCA
• MAST
• OWASP Top 10
• Java
• C++
• .NET
• Scripting/automation (e.g., Python, Bash)
• CI/CD pipelines
• DevSecOps