Application Security Analyst II (Cybersecurity)

Location: Detroit, MI, United States; full-time, onsite

Company

hirify.global is a large restaurant and retail company.

What you will do

• Perform application security assessments for applications, APIs, integrations, and supporting services.
• Conduct or coordinate SAST, DAST, SCA, API security testing, manual validation, and other application security testing.
• Analyze findings, validate risk and impact, reduce false positives, and partner with development teams on vulnerability remediation.
• Participate in threat modeling and secure design reviews, and define practical security controls before deployment.
• Integrate security checks and guardrails into source code management and CI/CD pipelines while supporting security tools and processes.
• Track risks, remediation plans, exceptions, and metrics; provide secure coding guidance and participate in architecture, project, change, and security governance reviews.

Requirements

• Bachelor’s degree in Computer Science, Computer Engineering, Information Technology, Cyber Security, or a related technical field; four years of relevant industry experience may substitute for the degree.
• At least three years of information technology experience, including at least one year in information security, application development, application security, or a closely related discipline.
• Working knowledge of secure software development lifecycle practices and the ability to apply security requirements within Agile or other development methodologies.
• Working knowledge of common application and API vulnerabilities, including the OWASP Top 10, and practical prevention and remediation approaches.
• Experience with one or more application security testing approaches or technologies, including SAST, DAST, SCA, API security testing, secrets scanning, or container security scanning.
• Ability to interpret application security findings, assess business and technical risk, and communicate remediation guidance to development and engineering teams.
• Understanding of secure coding and application security controls, including authentication, authorization, input validation, session management, encryption, secrets management, logging, and error handling.
• Understanding of web technologies, APIs, cloud-hosted applications, source code management, and CI/CD concepts.
• Familiarity with vulnerability management, risk acceptance, exception handling, and remediation tracking, along with strong analytical, problem-solving, documentation, and communication skills.

Nice to have

• Hands-on experience with enterprise application security tools and developer security workflows.
• Experience integrating security testing into CI/CD pipelines and development platforms.
• Familiarity with programming or scripting languages and the ability to understand application code.
• Familiarity with cloud-native architectures, containers, microservices, and infrastructure as code.
• Application security or security-related certifications such as CSSLP, GIAC, CISSP, Security+, or comparable credentials.

Culture & Benefits

• Collaborate with application development, engineering, architecture, infrastructure, risk, privacy, compliance, and cybersecurity teams.
• Support customer-oriented solutions and processes, clear communication with technical and non-technical audiences, and shared team objectives.
• Work independently with general direction while prioritizing competing responsibilities and managing multiple deadlines.
• Equal employment opportunity employer participating in E-Verify and providing reasonable interview accommodations upon request.