Application Security Analyst I

This is a fully remote position, open to applicants in Arizona, +18 more states.

📋 Description

• Enhance the organization's secure software development initiative by embedding security throughout the Software Development Life Cycle (SDLC).

• Collaborate with application development, DevOps, infrastructure, and security teams to identify, evaluate, and mitigate application security risks.

• Oversee application security evaluations and vulnerability management processes.

• Deploy and manage SAST, SCA, container, and CI/CD security measures.

• Promote the adoption of the ASPM platform and integrate security tools.

• Work alongside development teams to address security issues and enhance secure coding methodologies.

• Create and sustain AppSec automation, workflows, and operational runbooks.

• Assist with threat modeling, architecture reviews, and secure design consultations.

• Prioritize and oversee remediation actions for critical and high-risk vulnerabilities.

• Offer application security guidance across various business units and technology teams.

• Facilitate ArmorCode ASPM implementation, SAST/SCA integrations, AppSec automation, GitLab container scanning projects, and other high-priority application security efforts.

⛳️ Requirements

• A Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline is preferred.

• At least 5 years of experience in Application Security or Secure Development.

• Proficient in SAST, SCA, DAST, ASPM, container security, and CI/CD security controls.

• Practical experience with development platforms such as GitLab, GitHub, Azure DevOps, or similar.

• Familiarity with the OWASP Top 10, threat modeling, secure SDLC, and vulnerability management.

• Excellent communication and stakeholder management abilities.

• Relevant certifications such as CISSP, CSSLP, GSEC, GWAPT, or GIAC are preferred.

🏝️ Benefits

• Medical coverage

• Dental coverage

• Life insurance

• Paid holidays

• Paid vacations

• 401K plan with company match