Application Security Analyst
Core
Embed security into the software development lifecycle and perform technically credible application-security assessment across modern applications, APIs, cloud-native services, and software supply chains.
Role type
Application Security Analyst
Builds
CI/CD security controls, scanning integrations, secure coding standards, and developer enablement
Domain
Insurance / Application Security
Required skills
Application security testing, secure code review, vulnerability validation, OWASP Top 10/API risks, authentication/authorization patterns, session management, cryptography fundamentals, input validation, web/application attack techniques, SAST, DAST, SCA, API testing, secrets scanning, CI/CD security tooling, modern software architectures, REST/GraphQL APIs, containers, cloud services, software supply-chain dependencies, applied secure SDLC, threat modeling, architecture review, risk-based exception, application-risk prioritization
Preferred skills
Ability to engage developers at a technical level, translate exploitability into business impact, risk treatment decisions
Technologies
SAST, DAST, SCA, API testing, secrets scanning, CI/CD security tooling, REST, GraphQL, containers, cloud services
Responsibilities
Integrate security requirements and threat modeling into architecture, design, development, testing, release, and exception processes; Perform and validate SAST, DAST, SCA, API, mobile, and manual security testing; Conduct security design and architecture reviews for web, API, cloud-native, containerized, and distributed applications; Partner with developers to provide code-level or design-level remediation guidance and verify closure; Build or improve CI/CD security controls, scanning integrations, secure coding standards, and developer enablement; Use risk, exploitability, asset criticality, and business context to prioritize application vulnerabilities and security debt; Analyze recurring defect patterns and drive preventive control improvements across engineering teams
Seniority
Mid-Senior, hands-on IC