Application Security Senior Associate

Responsibilities

• Execute Software Composition Analysis, Static Application Security Testing, and Dynamic Application Security Testing activities.
• Review, validate, prioritize, remediate, retest, and close application security findings.
• Partner with application development and engineering teams to explain findings and recommend practical remediation.
• Support Application Security platforms and services through testing, analysis, monitoring, troubleshooting, and process adherence.
• Apply security standards, controls, and governance requirements to secure development and application security testing.
• Review evidence and track vulnerability exceptions and time-bound remediation commitments.
• Contribute to AppSec metrics, reporting, automation, continuous improvement, and audit documentation.

Requirements

• At least 6 years of related experience.
• Relevant experience in Application Security, secure software development, vulnerability management, or a related cybersecurity discipline.
• Working knowledge of SCA, SAST, DAST, and the application vulnerability management lifecycle.
• Ability to analyze technical security findings, assess risk, and communicate remediation requirements to engineering teams.
• Experience with Application Security tools, development pipelines, ticketing or workflow systems, and structured security evidence.
• Knowledge of secure development practices and common application security risks, such as the OWASP Top 10, is preferred.
• Bachelor’s degree preferred or equivalent experience.

Benefits

• Competitive compensation including base pay and annual incentive.
• Comprehensive health and life insurance and well-being benefits, based on location.
• Pension and retirement benefits.
• Paid time off, personal and family care, and other leaves of absence.
• Flexible hybrid work model with 3 days onsite and 2 days remote; onsite Tuesdays, Wednesdays, and a third team- or employee-specific day.