Security Analyst/Sr. Security Analyst (Application Security)-ITDSGGR (Contractual)

Overview

The Security Analyst (Application Security) supports the integration of security throughout the Software Development Lifecycle (SDLC) by partnering with development, infrastructure, and application teams to embed secure development practices and strengthen the overall security posture of enterprise applications.

Key Responsibilities

• Lead the identification, validation, prioritization, tracking, and remediation of application security vulnerabilities.
• Partner with application owners and engineering teams to manage vulnerability workflows.
• Provide risk-based remediation recommendations and guidance to application teams.
• Support the integration of security throughout the Software Development Lifecycle (SDLC).
• Lead and support the adoption of application security testing capabilities.
• Review security findings, validate results, and provide remediation guidance.
• Maintain visibility into application security posture through tracking, analysis, and reporting.
• Stay current with emerging threats, vulnerabilities, and industry best practices.

Required Experience

Minimum of four (4) years of relevant, professional work experience, is required, typically acquired by the completion of an advanced university degree, or equivalent, in Computer Science, Cybersecurity, or related field. Alternatively, a university degree, or equivalent, and ten (10) years of relevant professional experience, is required. Experience in Vulnerability Management, Application Security, Secure Development or related cybersecurity disciplines. Experience with one or more programming or scripting languages (e.g., Java, Python, .NET, PowerShell). Hands-on experience with application security testing methodologies and tools, including SAST, DAST, SCA, vulnerability assessments, and penetration testing. Experience collaborating with development and engineering teams.

Qualifications

Advanced university degree, or equivalent, in Computer Science, Cybersecurity, or related field, or university degree, or equivalent.

Other Details