Application Security Analyst

This role focuses on identifying, analyzing, and mitigating application security vulnerabilities throughout the SDLC. It supports a broader “Shift Left” cybersecurity strategy, ensuring security is integrated early in development and reinforced through DevSecOps practices.Key Responsibilities:Application Security & TestingPerform security testing: SAST, DAST, IAST, mobile security, and dynamic testingAnalyze vulnerabilities and recommend secure coding fixesDemonstrate vulnerabilities to development teamsDrive remediation efforts to closureDevSecOps & ToolingWork within CI/CD pipelines using tools such as:Jenkins, GitLab, GitHub Actions, TeamCityCheckmarx, GitHub Advanced Security, Burp SuiteIntegrate security controls into development workflowsWAF & Security ControlsLead Web Application Firewall (WAF) deployment for new and existing appsImplement application security policies, controls, and standardsCollaboration & EnablementPartner with development, platform, and supplier teamsProvide clear remediation guidanceTrain teams on secure coding and application security practicesDevelop training materialsAssessment & ReportingConduct security assessments using standard toolsTrack and report:RisksMilestonesDeliverablesStatus updatesRecommend strategies based on application risk postureThis role is based in Auburn Hills, MI and is required to be on-site in our HQ building 5 days per week.Basic Qualifications:Bachelor’s degree in Computer Science, Information Technology, or related field3+ years of hands-on experience in application security, security testing, and DevSecOpsStrong understanding of:Application architectures (web, mobile, APIs)Software development methodologies (Agile, SDLC)Modern programming languages (Java, C#, Python)Experience performing and interpreting results from:SAST, DAST, IAST, SCA, and mobile security testing toolsHands-on experience with secure code review in common languages (Java, C#, Python preferred)Prior background in application development, including:Compiled codeWeb applications / servicesMobile app developmentKnowledge of security frameworks and standards:NIST, ISO 27001NIST SSDF or similar secure development frameworksStrong understanding of:OWASP Top 10 vulnerabilities and mitigation techniquesCommon attack vectors (web exploits, DDoS, bot attacks)Experience with WAF technologies:Akamai, Cloudflare, AWS WAF, Azure Front DoorFamiliarity with cloud platforms and modern environments:AWS, Azure, GCPContainers (Docker, Kubernetes)Working knowledge of:Programming/scripting: Java, JavaScript, SQL, HTMLScripting languages (Python, Bash preferred)Strong analytical, problem-solving, and communication skillsAbility to explain technical risks to non-technical audiencesExperience writing security reports and documentationAbility to work independently and cross-functionallyPreferred Qualifications:Industry certifications:GIAC GWEBISC2 CSSLPEC-Council CASEOr equivalent AppSec certificationsOur Benefits — Designed with You in MindComprehensive Health & Well-being CoverageFrom your very first day, you'll have access to medical, dental, vision, and prescription drug coverage — ensuring you and your family stay healthy and protected.Generous Paid Time OffWe believe in work-life balance. That's why we offer: 17+ paid holidays, including shut-down from December 24th through New Years Day every year. Vacation, float & wellbeing days, sick time and fully paid parental leave when your family needs you most.Competitive Retirement Savings PlansWe help you plan for the future with:An employer match on contributions to your 401k, Roth, and Catch-Up plansAn employer contribution, even if you don't contributeIncome Protection & Insurance OptionsBenefit from included and optional disability, life, and other insurance programs — because your peace of mind matters.Company Vehicle Lease ProgramEligible employees and their immediate families can enjoy company vehicle lease options with included insurance, maintenance, and unlimited mileage. Plus, take advantage of exclusive discounts on Stellantis products.Family Building BenefitWe proudly support all paths to parenthood- including fertility and infertility treatments, adoption services, and gestational surrogacy.Support for Your Growth and Giving BackWe believe in investing in your future and your passions:Tuition reimbursementStudent loan refinancing programs18 paid volunteer hours each year to make a difference in your communityAnd so much more!When you join us, you're not just building a career — you're joining a company that supports you, inside and outside of work.Brand: FCA GroupJob ID: 2022246Employment Type: Full-timeJob Area: ICT, Digital and DataPosted Date: 22/10/2026