Remote job
Analyst, IT Security - Applications
Job details
About this role
Role overview
An application security analyst assesses software for vulnerabilities and helps teams build and operate applications more securely. The work spans security testing, vulnerability analysis, tooling and automation, and technical guidance for engineering and IT partners.
Responsibilities
- Run dynamic security scans on internal and public-facing applications, and assess findings for false positives. - Lead penetration tests and risk assessments for e-commerce applications, including APIs. - Analyze vulnerabilities, document risks, and recommend remediation steps. - Handle requests for static code analysis and software vulnerability reviews. - Work with engineering and support teams to improve application security practices and integrations. - Contribute to incident response and maintain technical security documentation.
Requirements
- A degree or certification in computer science, information systems, or a related field, or equivalent work experience. - At least 3–5 years of IT experience, including 2 or more years in application security. - Practical experience with DAST, SAST, and software composition analysis tools, plus manual web application penetration testing. - Proficiency with Burp Suite and Kali Linux, and experience testing APIs. - Knowledge of secure coding practices, OWASP, threat modeling, and DevSecOps. - Familiarity with Java, Python, or C++; scripting with tools such as PowerShell, JavaScript, or SQL; and Windows or Unix systems.
Nice to have
- Familiarity with Agile or DevOps delivery, security governance and control frameworks, and regulatory requirements such as SOX and PCI.
Benefits and work setup
- Remote, full-time role with occasional travel to an office; applicants must be authorized to work in the United States without sponsorship. - Benefits include medical, dental, and vision coverage, a 401(k), paid time off and holidays, an employee assistance program, merchandise discounts, development support, and eligible community volunteer and donation programs.