Application Security Analyst

Overview Who we are. Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high‑quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us. An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world‑changing company‑ delivering on Toyota's vision to move people beyond what’s possible. At TFS, you will help create best‑in‑class customer experience in an innovative, collaborative environment. Who we’re looking for Toyota Financial Services (TFS) Technology team is looking for a highly motivated person to fill a role as an Application Security Analyst. Your responsibilities will be to ensure the security of company software applications, web services, and APIs. You will work closely with development teams to identify vulnerabilities, suggest remediation efforts, and integrate security controls into the DevOps pipeline. The role involves ensuring the security and integrity of our products and third‑party software, providing guidance on security risks. Responsibilities Ensure the security of company software applications, web services, and APIs. Identify vulnerabilities and suggest remediation efforts. Integrate security controls into the DevOps pipeline. Provide guidance on security risks to maintain product and third‑party software security. What you’ll be doing Collaborate with developers to shift left, integrating security early in the software development life cycle (SDLC). Integrate security tools such as SAST, DAST, and SCA into development processes. Review code for security vulnerabilities and provide guidance on remediation and secure coding practices. Prepare detailed vulnerability reports and dashboards for leadership, prioritizing risks based on business impact. Stay updated on emerging threats and vulnerabilities relevant to application security. Provide guidance and training on interpreting reports and strategies for remediation. What you bring 3–6 years of application security experience with hands‑on experience using SAST/SCA/DAST tools and methodologies. Proven expertise testing complex web applications, APIs, and mobile applications for security vulnerabilities. Strong understanding of application security standards such as OWASP Top Ten and SANS CWE Top 25. Familiarity with programming languages and frameworks commonly used in web and mobile applications (Java, Python, Bash/Shell, PHP, JavaScript). Strong understanding of CI/CD tools such as Jenkins, Harness, and GitHub Actions. Familiarity with containerization and orchestration (Docker, Kubernetes). Knowledge of cloud platforms (AWS, Azure, GCP) and their security features. Knowledge of Infrastructure as Code tools such as Terraform and Ansible. Strong analytical and problem‑solving skills. Excellent communication and collaboration abilities. Ability to work in a fast‑paced, agile environment. Ability to lead security testing initiatives and mentor junior security engineers. Benefits A work environment built on teamwork, flexibility, and respect. Professional growth and development programs to help advance your career, including tuition reimbursement. Team Member Vehicle Purchase Discount. Toyota Team Member Lease Vehicle Program (if applicable). Comprehensive health care and wellness plans for your entire family. Toyota 401(k) Savings Plan with a company match, plus an annual retirement contribution from Toyota regardless of your own contributions. Paid holidays and paid time off. Referral services for prenatal services, adoption, childcare, schools, and more. Tax‑advantaged accounts such as Health Savings Account, Health Care FSA, and Dependent Care FSA. Relocation assistance (if applicable). Equal Opportunity Employer Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law. #J-18808-Ljbffr TCC Toyota Motor Credit Corporation Company