Lead Analyst, Technology Centre
Core
Application Security Analyst validating and triaging security findings from automated tools to ensure secure software delivery.
Role type
Application Security Analyst (IC)
Builds
Secure software delivery for AIA's digital and analytics platforms
Domain
Application Security / Secure Software Development
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
vulnerability analysis, false positive triage, secure code review, exploitability assessment, risk-based remediation guidance, source code analysis (Java, Python, JavaScript), web application security knowledge, authentication/authorization concepts
Preferred skills
manual application security testing, penetration testing, API security testing, DevSecOps practices, CI/CD pipeline security, container security, cloud application security
Technologies
SAST, SCA, Veracode, Checkmarx, SonarQube, Snyk, Nexus IQ, GitHub Advanced Security
Responsibilities
Analyze and triage application security findings from SAST/SCA tools; Differentiate genuine vulnerabilities from false positives; Review source code to understand vulnerability context; Assess exploitability and business impact; Provide risk-based remediation guidance to development teams; Document vulnerability analysis and remediation recommendations; Track remediation progress and security metrics
Seniority
Mid-level, hands-on IC
