Application Security Analyst
Core
Application Security Analyst responsible for managing vulnerabilities via SAST/DAST, overseeing Bug Bounty programs, conducting threat intelligence, and securing AI-enabled applications and workflows.
Role type
Application Security Analyst (IC)
Builds
Secure application development workflows and AI-integrated products
Domain
Application Security / AI Security / Cloud Security
Deliverable
production ML models
Required skills
SAST/DAST tools, OWASP Top 10, secure coding practices, generative AI tools, LLM security risks, bug bounty platforms, threat intelligence, incident response
Preferred skills
Cloud platforms (AWS/GCP/Azure), GRC frameworks (NIST CSF/ISO 27001/SOC 2), professional certifications (GWAPT/OSWE/GWEB/CEH/CISSP), LLM application security testing
Technologies
Snyk, Semgrep, WebEx, Slack
Responsibilities
Manage vulnerabilities identified through SAST/DAST; Validate and assign vulnerabilities to AppDev teams; Oversee Bug Bounty program; Conduct threat intelligence research; Support MSSP security notifications; Collaborate on secure coding practices; Review AI-generated code and workflows; Assess AI-enabled applications for risks like prompt injection; Contribute to GRC initiatives; Provide cloud security and third-party risk support
Seniority
Mid-level, hands-on IC
