Назад
Company hidden
7 дней назад

Application Security Analyst (AI)

56 930 - 70 000$
Формат работы
onsite
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Application Security Analyst (AI): Strengthening application security across the software development lifecycle through security assessments, vulnerability management, threat modeling, and automation with an accent on SAST, DAST, SCA, APIs, cloud-native applications, and software supply chain risks. Focus on validating findings, guiding remediation, building security workflows, and enabling secure development practices across engineering teams.

Location: Chicago (Green St), Illinois, United States

Salary: $56,930.88–$70,000 per year, plus bonus and/or commission eligibility.

Company

hirify.global provides a cloud platform for the insurance economy, using intelligent and AI-enabled technologies to support insurers, repairers, automakers, and parts suppliers.

What you will do

  • Perform application security assessments using static analysis, dynamic analysis, software composition analysis, secrets detection, and manual validation.
  • Review, triage, prioritize, and validate security findings and remediation activities.
  • Support SSDLC, security-by-design, secure coding, threat modeling, and architecture review initiatives.
  • Partner with development, engineering, product, and platform teams to identify weaknesses and provide remediation guidance.
  • Coordinate penetration testing, vulnerability management, security metrics, reporting, and dashboards.
  • Create automation, scripts, integrations, training, and guidance that improve security workflows and secure development practices.

Requirements

  • Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.
  • Understanding of web application vulnerabilities, including the OWASP Top 10.
  • Experience with SAST, DAST, SCA, and secrets detection platforms.
  • Knowledge of application architectures, APIs, cloud-native applications, modern development practices, and CI/CD pipelines.
  • Experience with scripting languages such as Python, PowerShell, JavaScript, or Go, and source control platforms such as GitHub, GitLab, or Azure DevOps.
  • Strong analytical, troubleshooting, communication, and stakeholder collaboration skills.

Nice to have

  • Experience with software supply chain security, security process automation, secure architecture reviews, and threat modeling.
  • Familiarity with Endor Labs, Wiz, GitHub Advanced Security, Veracode, Checkmarx, Burp Suite, or similar tools.
  • Knowledge of Azure, AWS, or GCP security concepts.
  • Security certifications such as Security+, GSEC, CSSLP, GWAPT, or OSCP.

Culture & Benefits

  • Full-time employment with 401(k) match, paid time off, and comprehensive health insurance.
  • Annual incentive plan performance bonus, stock purchase plan options, and wellness programs.
  • Tuition reimbursement and adoption assistance.
  • Employee resource groups and an emphasis on integrity, customer focus, innovation, inclusion, diversity, and collaboration.

Hiring process

  • A video interview is required and will be transcribed and retained for review.
  • Generative AI and automated assistance are not permitted during interviews unless explicitly allowed for a specific exercise.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →