Senior Application Security Analyst

Role overview Help strengthen an application security program spanning endpoints, software, and supporting infrastructure. The role combines hands-on security review and risk tracking with guidance for engineering and operations teams. You will help teams understand findings, coordinate remediation, and prepare evidence for assessments and audits.

Responsibilities - Run recurring security scans and work with stakeholders to resolve identified issues. - Review third-party assessments and vendor, supplier, and partner reports for security control alignment. - Track security risks and related evidence through their lifecycle. - Advise operational teams on existing and emerging security concerns. - Support internal security reviews, assessments, and audits, including preparation of evidence. - Explain relevant security controls to process owners and translate technical issues for varied audiences.

Requirements - Practical programming experience and ability to review code in multiple languages. - Hands-on experience implementing endpoint, application, and infrastructure security controls, including SAST, DAST, or SCA. - Experience with public cloud services such as AWS or Azure. - Experience conducting vulnerability assessments and penetration tests. - Ability to work independently, learn quickly, synthesize information, and collaborate across engineering and operations. - Experience engaging teams to remediate security findings and producing security evidence for audits.

Nice to have - Both red team and blue team experience. - Familiarity with ISO 27001, NIST 800-53, PCI-DSS, or PBMM controls; enterprise GRC tools; and large-scale or serverless environments.

Benefits and work setup Flexible work arrangements, learning support, tuition reimbursement, wellbeing resources, retirement planning, volunteer days, home internet reimbursement, and wellness reimbursement are among the listed benefits. The role may also include incentive compensation and equity grants.