Remote Position
Application Security Analyst
🌍 Remote · United States
💼 Full-time
About the position The Application Security Analyst is one who embeds security into the software development lifecycle and performs technically credible application-security assessment across modern applications, APIs, cloud-native services, and software supply chains. The role partners directly with developers and architects to prevent, identify, validate, and remediate exploitable application risk.
Responsibilities
- Integrate security requirements and threat modeling into architecture, design, development, testing, release, and exception processes.
- Perform and validate SAST, DAST, SCA, API, mobile, and manual security testing; distinguish exploitable weaknesses from tool noise.
- Conduct security design and architecture reviews for web, API, cloud-native, containerized, and distributed applications.
- Partner with developers to provide code-level or design-level remediation guidance and verify closure.
- Build or improve CI/CD security controls, scanning integrations, secure coding standards, and developer enablement.
- Use risk, exploitability, asset criticality, and business context to prioritize application vulnerabilities and security debt.
- Analyze recurring defect patterns and drive preventive control improvements across engineering teams.
Requirements
- Hands-on experience with application security testing, secure code review, and vulnerability validation.
- Strong knowledge of OWASP Top 10/API risks, authentication/authorization patterns, session management, cryptography fundamentals, input validation, and common web/application attack techniques.
- Working knowledge of SAST, DAST, SCA, API testing, secrets scanning, and CI/CD security tooling.
- Understanding of modern software architectures, REST/GraphQL APIs, containers, cloud services, and software supply-chain dependencies.
- Ability to engage developers at a technical level and provide actionable remediation guidance.
- Applied secure SDLC, threat modeling, architecture review, risk-based exception, and application-risk prioritization experience.
- Ability to translate exploitability into business impact and risk treatment decisions.
- Understanding of security-control objectives for application development and deployment.
- BS Computer Science, Software Engineering, Cybersecurity, Information Technology, or a related discipline, or equivalent relevant professional experience.
Benefits
- Medical
- Dental
- Vision
- PTO
- 401K