Application Security Analyst
Core
Embed security throughout the software development lifecycle by identifying, assessing, and remediating application security risks.
Role type
Application Security Analyst
Builds
Secure software development lifecycle (SSDLC) initiatives and security-by-design practices
Domain
Cloud-native applications, APIs, and modern development practices
Required skills
SAST, DAST, SCA, secrets detection, threat modeling, secure coding guidance, automation scripting, vulnerability management, software supply chain risk assessment
Preferred skills
Endor Labs, Wiz, GitHub Advanced Security, Veracode, Checkmarx, Burp Suite, cloud security concepts, secure architecture reviews
Technologies
Python, PowerShell, JavaScript, Go, GitHub, GitLab, Azure DevOps, Azure, AWS, GCP
Responsibilities
Perform application security assessments (static, dynamic, SCA, manual validation); Review and triage security findings; Support SSDLC initiatives; Conduct threat modeling and security reviews; Partner with development teams to identify weaknesses; Assist with penetration testing coordination; Develop and maintain security metrics and dashboards; Support vulnerability management processes; Create automation and scripts; Evaluate software supply chain risks; Deliver security awareness training; Support incident response activities
Seniority
Mid-level, hands-on IC
