7 дней назад
Application Security Analyst (AI)
56 930 - 70 000$
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Application Security Analyst (AI): Strengthening application security across the software development lifecycle through security assessments, vulnerability management, threat modeling, and automation with an accent on SAST, DAST, SCA, APIs, cloud-native applications, and software supply chain risks. Focus on validating findings, guiding remediation, building security workflows, and enabling secure development practices across engineering teams.
Location: Chicago (Green St), Illinois, United States
Salary: $56,930.88–$70,000 per year, plus bonus and/or commission eligibility.
Company
provides a cloud platform for the insurance economy, using intelligent and AI-enabled technologies to support insurers, repairers, automakers, and parts suppliers.
What you will do
- Perform application security assessments using static analysis, dynamic analysis, software composition analysis, secrets detection, and manual validation.
- Review, triage, prioritize, and validate security findings and remediation activities.
- Support SSDLC, security-by-design, secure coding, threat modeling, and architecture review initiatives.
- Partner with development, engineering, product, and platform teams to identify weaknesses and provide remediation guidance.
- Coordinate penetration testing, vulnerability management, security metrics, reporting, and dashboards.
- Create automation, scripts, integrations, training, and guidance that improve security workflows and secure development practices.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.
- Understanding of web application vulnerabilities, including the OWASP Top 10.
- Experience with SAST, DAST, SCA, and secrets detection platforms.
- Knowledge of application architectures, APIs, cloud-native applications, modern development practices, and CI/CD pipelines.
- Experience with scripting languages such as Python, PowerShell, JavaScript, or Go, and source control platforms such as GitHub, GitLab, or Azure DevOps.
- Strong analytical, troubleshooting, communication, and stakeholder collaboration skills.
Nice to have
- Experience with software supply chain security, security process automation, secure architecture reviews, and threat modeling.
- Familiarity with Endor Labs, Wiz, GitHub Advanced Security, Veracode, Checkmarx, Burp Suite, or similar tools.
- Knowledge of Azure, AWS, or GCP security concepts.
- Security certifications such as Security+, GSEC, CSSLP, GWAPT, or OSCP.
Culture & Benefits
- Full-time employment with 401(k) match, paid time off, and comprehensive health insurance.
- Annual incentive plan performance bonus, stock purchase plan options, and wellness programs.
- Tuition reimbursement and adoption assistance.
- Employee resource groups and an emphasis on integrity, customer focus, innovation, inclusion, diversity, and collaboration.
Hiring process
- A video interview is required and will be transcribed and retained for review.
- Generative AI and automated assistance are not permitted during interviews unless explicitly allowed for a specific exercise.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
3 дня назад
Cybersecurity Engineer – Applications
100 000 - 150 000$
9 дней назад
Senior Engineer, AI Product Security
153 000 - 166 000$
9 дней назад
Manager 3, Product Security
240 000 - 345 000$
9 дней назад
Application Security Engineer (DevSecOps)
8 дней назад
Software Engineering Manager (Cybersecurity)
147 760 - 240 110$
12 дней назад
Staff Application Security Engineer
182 800 - 215 000$