Application Security Analyst
3B Staffing LLC
Required:
- 3+ years of offense and defense application security experience with demonstrated hands-on expertise in SAST and SCA tools such as Checkmarx and Synk, including findings triage, ruleset tuning, and managing vulnerability lifecycle across enterprise environments.
- Strong understanding of OWASP Top Ten and broader web and API vulnerabilities, including practical remediation techniques within enterprise environments.
- Knowledge of web and mobile application development and deployment methodologies.
- Hands-on experience securing AWS cloud environments, including Lambda, API Gateway, IAM, and S3, with experience operating cloud-native security platforms such as Orca Security, Wiz, or Prisma Cloud to surface and remediate risk across workloads and infrastructure.
- Ability to read and reason about code in languages such as Node.js, JavaScript, Java, or Python.
- Ability to sufficiently perform meaningful secure code review, validate SAST/SCA findings, and collaborate credibly with engineering teams on remediation.
- Experience working with change management and release governance processes within production environments.
- Strong project management and communication skills with the ability to represent cybersecurity requirements across technical and business stakeholders.
- Solid understanding of agile methodologies, DevSecOps practices, and CI/CD pipeline integration. Familiarity with security threat intelligence sources and how they inform application-layer defenses. Experience partnering with development teams to drive security remediation by running working sessions, building runbooks, and supporting secure coding adoption through a developer-first engagement model.
- Join the greater Information Security Team and help advance enterprise application security program.
- Critical part in the design, build, and operation of security capabilities that protect Client's web, mobile, and cloud-native applications.
- Broad application security experience across secure development practices, code analysis, cloud security, and production protection technologies.
Execute and mature the application security architecture and framework across development, cloud, and production environments. - Work directly with business application teams on secure design, code review oversight, release coordination, and production resilience.
- Formally represent the application security team in discussions involving new projects, architectures, and security control design, ensuring cybersecurity requirements are embedded early and consistently.
- Regular interaction with both technical and business personnel will be required to provide risk-based security analysis and recommendations that balance protection, performance, and delivery timelines.
- Administer and optimize static code scanning solutions such as Checkmarx, ensure vulnerabilities are identified and remediated in alignment with OWASP Top Ten and broader industry risks, and collaborate closely with AWS engineering teams to secure Lambda functions and runtime resources.
- Partner with change and release management to coordinate production code deployments from both security and reliability perspectives, while maintaining operational oversight of application-layer protection technologies.
- Lead application security design and implementation across web, mobile, and AWS cloud-native services, including secure architecture reviews, AWS Lambda and runtime resource protection, and integration of security controls into CI/CD pipelines.
- Administer and optimize static code scanning solutions such as Checkmarx, conduct vulnerability triage and remediation guidance aligned with OWASP Top Ten and broader application security risks, and validate security readiness prior to production release.
- Manage and enhance application-layer protection technologies, including policy tuning, configuration updates, and detection improvements, ensuring protections remain effective without impacting performance or customer experience.
- Coordinate closely with change and release management to align security controls with production deployment schedules, participate in go-live planning, and act in a Site Reliability Engineering capacity to ensure secure and stable releases.
- Represent the application security team in project planning and architectural discussions, provide risk-based security analysis, and ensure cybersecurity requirements are embedded into design, development, and delivery decisions.
- Provide structure.
- Security reporting, track remediation efforts, and support cross-functional project management activities to ensure application security initiatives are delivered on time and aligned with business objectives.
Vacancy posted 5 days ago
Similar jobs that could be interesting for youBased on the Application Security Analyst in New York, NY vacancy
- ...Application Security Analyst (AI Training) About the Role We're partnering with leading AI research labs to build the next generation of security-aware AI systems - and we need people who truly understand how software breaks in the real world. As an Application...SuggestedHourly payOngoing contractContract workFreelanceRemote workFlexible hours
Alignerr
New York, NY1 day ago - ....Success Academy is growing rapidly and security is at the forefront of enabling that growth. We are seeking a Senior Security Analyst to join our Information Security & Privacy... ...built around cloud and SaaS based applications, operates networking and in-school technologies...SuggestedWork at officeImmediate startVisa sponsorship3 days per week
$97.59k - $142.99k
...We have an exciting opportunity to join our team as a Sr. II Security Analyst - Vulnerabilities. In this role, the successful analyst will... ...remediation efforts with infrastructure teams and application ownersAnalyze threat intelligence reports, write risk analysis...SuggestedFull time- ...enabling low-cost solar energy solutionsRole PurposeThe Global Security Operations Center Analyst, under the guidance of the supervisor, is responsible... ...for reasonable accommodations in accordance with applicable laws. Individuals with disabilities or sincerely held religious...SuggestedCasual workWork at officeWorldwideAll shiftsShift work
- Job-ID31409788Reference25-31660Title : SOC Analyst Location : New York City, Boston MA, Atlanta GA Shift : 3PM to 12AM EST Mon - Fri &... ...SOC Analyst serves as the first line of defense for information security operationsmonitoring, investigating, and responding to...SuggestedShift work
- ...Network Security AnalystThe consultant will work onsite in support of threat detection and vulnerability assessments, data analysis and Cisco Client/Stealthwatch.Required SkillsThreat detection and vulnerability assessment experienceExperience with network segmentation...
ShiftCode Analytics
New York, NY2 days ago - ...Washington D.C., London and Amsterdam. About the Team: The Security Governance, Risk, and Compliance (GRC) team is part of Plaid's... ..., age, military or veteran status, disability, or other applicable legally protected characteristics. We also consider qualified...Contract workWork experience placementLocal area
PLAID
New York, NY4 days ago - ...Security AnalystJob Location: NYC, NY (Looking for local Candidate - MUST be able to onsite... ...Previous hands on experience in application or network penetration testing Strong knowledge... ...testing program within the firm. Analysts are responsible for: Helping to develop...Work experience placementLocal area
ClifyX
New York, NY2 days ago - ...Security AnalystThe Security Analyst is responsible for managing third-party vulnerability data, executing scans using Sompo’s proprietary tools,... ...tools as well as industry-standard platforms.Support web application scanning and collaborate on web application firewall (WAF...
Argyle Infotech
New York, NY2 days ago $60k - $80k
...Overview Under the direction of the Security Operations Lead, the Security Analyst plays a key role in supporting and enhancing the organization’s cybersecurity... ...where we operate. Accommodations are available for applicants with disabilities. If you are unable to submit your...Full timeRemote workImageTrend
New York, NY1 day ago- Principal Duties:Security review background- AI adaption knowledge for security risk review backgroundCore Must-Haves: AI Security expertise... ...with risk management frameworks and methodologies for applications, AI solutions, and medical devices Risk Remediation - experience...
- ...Job Title: IGA/Security Analyst Duration: 12+ Months Start Date: ASAP Location: 2 Broadway, New York, 10004 (Hybrid) Position Type: Contract... ...(OT) environments. This role will focus on onboarding applications into the enterprise IGA platform, modernizing authentication...Contract workLocal areaImmediate startRemote work
V Group
New York, NY3 days ago - ...Monitor and analyze security events and logs using Security Information and Event Management (SIEM) tools such as Splunk, SentinelOne, and others Assist in incident response activities, including threat analysis and coordination of remediation efforts Support vulnerability...
The Phoenix Group
New York, NY2 days ago $100k - $140k
...Shachar (ex-Palo Alto Networks, AWS, Demisto) and Dan (ex-Abnormal Security, Twitter) have previously built, launched, and scaled... ...expanding customer base. Job Overview We're looking for a Security Analyst to be at the core of what we do: reviewing real security cases...Goartemis
New York, NY4 days ago- ...Albany Beck is a specialist consultancy delivering transformation, cyber security and change expertise to leading Financial Services organisations. We are currently seeking a Security Analyst to support a large-scale Identity and Cyber Security function within a global...
Albany Beck
New York, NY1 day ago - ...frameworks.Nessus, NMAP, ZAP, BurpSuite, Invicti, Nuclei or other scanning tools.Web application scanning and web application firewalls.Containers.CIS benchmarks, STIGs, or other security hardening standards.Additional desirable skills or experience:SAML, Kerberos, OAuth...
The Dignify Solutions, LLC
New York, NY2 days ago - ...iO Associates are supporting a growing financial services organisation on the appointment of an IT Security Analyst to help identify, remediate, and reduce security risk across networks, endpoints, servers, and core infrastructure. The role covers vulnerability management...Relocation
IO Associates
New York, NY1 day ago - ...Security Analyst Full-time Onsite - NYC No 3rd parties please. This role is not eligible for employment-based immigration sponsorship. Applicants must be legally authorized to work in the United States without employer sponsorship, now or in the future....Full timeVisa sponsorship
Perennial Resources International
New York, NY3 days ago - ...Finance Modules - This part of the project aims to enhance Workday's security and compliance by analyzing and migrating existing roles,... ...skills will not be considered ~ Must have 7+ years of Security Analyst experience ~7 years of experience conducting security...Remote work
3B Staffing LLC
New York, NY5 days ago $150k - $175k
...wait to learn more about you.Role SummaryThe Asset-Backed Securities Trader/Analyst is responsible for identifying and sourcing attractive investment... ....This position is not eligible for visa sponsorship. Applicants must be authorized to work in the U.S. without visa...Full timeWork at officeLocal area$70k - $90k
...This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Operations Analyst based in the United States. This is a remote-first opportunity for a security professional focused on protecting...Remote workWork from homeFlexible hoursJobgether
New York, NY3 days ago$69.4k - $158k
...Security Operations Center Analyst The Opportunity: Are you ready to take a strategic role in cyber defense for U.S Cyber Command? Do you want to... ...Fundamentals Knowledge of Splunk Phantom or SOAR Clearance: Applicants selected will be subject to a security investigation and...Full timeContract workPart timeWork at officeLocal areaRemote workBooz Allen Hamilton
New York, NY3 days ago$110k - $135k
...technology, and trusted partnerships, we make security stronger, more effective, and easier to... ...with minimal direction Support Security Analysts with alert triage, classification,... ...opportunity for all associates and job applicants regardless of race, color, religion, national...nuHarbor
New York, NY2 days ago- Metropolitan Transportation Authority is seeking a Transit Management Series / Staff Analyst Series role focusing on vulnerability mitigation and security technology at 130 Livingston Street, Brooklyn. The position oversees security system assessments, design reviews, and...
- ...Security Operations Analyst (AI Training) About the Role We're partnering with the world's leading AI research labs to build the next generation of AI-powered security operations tools. As a Security Operations Analyst, you'll bring your real-world SOC experience...Hourly payOngoing contractContract workFreelanceRemote workFlexible hours
Alignerr
New York, NY1 day ago - Senior Consultant - Epic Security Analyst - Remote Join to apply for the Senior Consultant - Epic Security Analyst - Remote role at Nordic... ...orientation, or any other legally protected status under applicable local, state or federal law. EEO/AA Employer: M/F/Disabled and...Remote jobFull timeContract workLocal area
$80k - $95k
...us on this journey. Fitch Ratings is seeking an Analyst to join its Asset-Backed Securities (ABS) group in our Chicago or New York office. The... ...Affirmative Action Employer. We evaluate qualified applicants without regard to race, color, national origin, religion...Temporary workWork experience placementInternshipWork at officeImmediate start3 days per weekFitch Group
New York, NYa month ago- A critical infrastructure compliance firm is seeking a Security Analyst to support the Critical Infrastructure Protection Compliance Department. Ideal candidates will have over 5 years of experience with CIP standards, strong analytical skills, and the ability to work...
- A leading healthcare system in New York is seeking a Sr. II Security Analyst focused on managing security vulnerabilities. The role involves conducting vulnerability scans, analyzing threats, and coordinating with various teams. Candidates must have at least 6 years of...
- Responsibilities Security Planning Develop a security plan for the best standards and practices for the company Continuously update the company’s incident response and disaster recovery plans Research the latest information technology security trends to keep up to date...
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Application Security Analyst. Be the first to apply!
Related searches
- software development analyst New York, NY
- software analyst New York, NY
- application support analyst New York, NY
- engineering business analyst New York, NY
- clinical applications analyst New York, NY
- epic application analyst New York, NY
- application security analyst New York, NY
- software configuration analyst New York, NY
- application analyst New York, NY
- sql database developer analyst New York, NY