Overview
Analyst role in application security, triaging scan results and partnering with development teams, plus a Sr. Analyst cloud security scope supporting cloud security strategy and DevSecOps.
What you'll do
- Review and triage application security scan results
- Analyze and research zero-day vulnerabilities
- Partner with development teams on remediation and false positive reviews
- Research, evaluate, and prototype AI/LLM-driven capabilities to advance application security detection, response, and developer experience
- Support and contribute to strategic initiatives that shift security earlier into the developer workflow
- Contribute to a secure/compliant cloud-native service catalog and repositories
- Maintain compliance across production, development and corporate systems hosted in public clouds
- Collaborate with engineering and operations teams toward implementing controls and processes that address identified gaps
- Identify threat surfaces and pro-active and reactive security controls to minimize overall residual risk
What you'll need
- 3+ years of application security experience
- 1+ years partnering with development teams on secure code review and vulnerability remediation
- Experience with security tool administration, configuration, and integration
- Experience with application security scanning tools (SAST, SCA, IAST) such as Snyk, Contrast Security, CxOne
- Ability to manage priorities, triage requests, and balance operational demands
- Experience with container technologies such as Docker and Kubernetes
- Knowledge of cloud platforms and services (AWS, Azure, GCP)
- Knowledge of development pipelines such as Jenkins, ElectricFlow, Azure DevOps etc.
- Experience working in an Agile environment
- University (Degree) education requirement
Details
- Work will be carried out in an in-office environment
- Physical requirements: sedentary work
- Career level 5IC
Read the full description and apply on the company’s own careers page.