Application Security Analyst

Application Security AnalystJoin a Great Place to Work certified company - our Information Security Team is seeking an Application Security Analyst!Are you passionate about securing applications and helping development teams build software that is resilient against evolving cyber threats? We are seeking a detail-oriented, curious, and collaborative Application Security Analyst to play a critical role in strengthening our application security program.This is a new and exciting opportunity where you'll work closely with software development, business systems, information technology, and other teams to identify vulnerabilities, implement security best practices, and integrate security throughout the Software Development Lifecycle (SDLC). If you're an application security professional or developer who thrives in a fast-paced environment and enjoys solving complex security challenges, we'd love to hear from you.Location/ScheduleHybrid schedule with 3 days/week at our corporate office in Lake Forest, IL.Flexibility to be assigned an 'on call' schedule approximately once every 6 weeks.Local Northern IL/Southeast WI candidates only!What You'll DoPerform static and dynamic application security testing (SAST/DAST) using tools such as Veracode, Checkmarx, or Burp SuiteIdentify and analyze vulnerabilities, partnering with developers to drive timely, effective remediationConfigure and optimize Web Application Firewall (WAF) rules; monitor logs to detect and mitigate threatsParticipate in secure design reviews, threat modeling, and architecture assessmentsSupport API security, including authentication methods (OAuth, API keys) and secure data handling practicesTrack remediation efforts across teams, validate fixes, and document closure of vulnerabilitiesMaintain clear, up-to-date documentation on AppSec processes, tools, and standardsStay current on OWASP Top 10, SANS CWE Top 25, and emerging application-layer threatsWhat We're Looking ForBachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field- preferred2+ years' experience in application security or software development with security responsibilities or 4+ years' experience in lieu of educationCertifications in CSSLP, CASE, or GWEB- preferred2 years' experience performing SAST and DASTStrong understanding of secure coding practices and SDLC integrationHands-on experience with AppSec tools and vulnerability management such as Veracode, Checkmarx, or Burp SuiteAbility to translate technical findings into actionable guidance for developersCuriosity and commitment to staying ahead of evolving cyber threatsStrong communication and collaboration skillsCompensationThe annual salary range for this role is $ 67,980 to $108,768. This role is eligible for an annual bonus opportunity. A specific salary offer considers factors including but not limited to skill sets, experience and training, licensure and certifications, and other business and organizational needs. It is not typical for an individual to be hired at or near the top of the salary range and compensation decisions are dependent on the facts and circumstances of each case.Consumers Credit Union provides eligible employees an opportunity to participate in our medical (High Deductible, HMO and PPO), dental, vision, spending accounts, short-term disability, long-term disability, life insurance and other plans effective date of hire. You will be eligible to participate in the 401(k) savings plan at any time. You will be automatically enrolled in the pension plan following six months of employment and 1,000 hours of service and reaching age 20.Equal Opportunity EmployerCCU complies with the requirements and spirit of the law in the implementation of all facets of equal opportunity in employment. There will be no discrimination on the basis of race, ancestry, color, religion, sex, sexual orientation, gender identity, marital status, pregnancy, age, national origin, citizenship, disability, genetic information, military status (including unfavorable discharge from the military), criminal or arrest history (unless job related), crime victim status, or any other protected characteristic in the recruitment, selection, training, utilization, promotion, termination, or any other employment actions or term and condition of employment. CCU complies with applicable state and local laws governing non-discrimination in employment in every location in which CCU has facilities.We are committed to providing access, equal opportunity and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. If reasonable accommodation is needed to participate in the job application or interview process please contact our Human Resources team at: View email address on click.appcast.io or View phone number on click.appcast.io.