Application Security Analyst
3B Staffing LLC
Required:
- 3+ years of offense and defense application security experience with demonstrated hands-on expertise in SAST and SCA tools such as Checkmarx and Synk, including findings triage, ruleset tuning, and managing vulnerability lifecycle across enterprise environments.
- Strong understanding of OWASP Top Ten and broader web and API vulnerabilities, including practical remediation techniques within enterprise environments.
- Knowledge of web and mobile application development and deployment methodologies.
- Hands-on experience securing AWS cloud environments, including Lambda, API Gateway, IAM, and S3, with experience operating cloud-native security platforms such as Orca Security, Wiz, or Prisma Cloud to surface and remediate risk across workloads and infrastructure.
- Ability to read and reason about code in languages such as Node.js, JavaScript, Java, or Python.
- Ability to sufficiently perform meaningful secure code review, validate SAST/SCA findings, and collaborate credibly with engineering teams on remediation.
- Experience working with change management and release governance processes within production environments.
- Strong project management and communication skills with the ability to represent cybersecurity requirements across technical and business stakeholders.
- Solid understanding of agile methodologies, DevSecOps practices, and CI/CD pipeline integration. Familiarity with security threat intelligence sources and how they inform application-layer defenses. Experience partnering with development teams to drive security remediation by running working sessions, building runbooks, and supporting secure coding adoption through a developer-first engagement model.
- Join the greater Information Security Team and help advance enterprise application security program.
- Critical part in the design, build, and operation of security capabilities that protect Client's web, mobile, and cloud-native applications.
- Broad application security experience across secure development practices, code analysis, cloud security, and production protection technologies.
Execute and mature the application security architecture and framework across development, cloud, and production environments. - Work directly with business application teams on secure design, code review oversight, release coordination, and production resilience.
- Formally represent the application security team in discussions involving new projects, architectures, and security control design, ensuring cybersecurity requirements are embedded early and consistently.
- Regular interaction with both technical and business personnel will be required to provide risk-based security analysis and recommendations that balance protection, performance, and delivery timelines.
- Administer and optimize static code scanning solutions such as Checkmarx, ensure vulnerabilities are identified and remediated in alignment with OWASP Top Ten and broader industry risks, and collaborate closely with AWS engineering teams to secure Lambda functions and runtime resources.
- Partner with change and release management to coordinate production code deployments from both security and reliability perspectives, while maintaining operational oversight of application-layer protection technologies.
- Lead application security design and implementation across web, mobile, and AWS cloud-native services, including secure architecture reviews, AWS Lambda and runtime resource protection, and integration of security controls into CI/CD pipelines.
- Administer and optimize static code scanning solutions such as Checkmarx, conduct vulnerability triage and remediation guidance aligned with OWASP Top Ten and broader application security risks, and validate security readiness prior to production release.
- Manage and enhance application-layer protection technologies, including policy tuning, configuration updates, and detection improvements, ensuring protections remain effective without impacting performance or customer experience.
- Coordinate closely with change and release management to align security controls with production deployment schedules, participate in go-live planning, and act in a Site Reliability Engineering capacity to ensure secure and stable releases.
- Represent the application security team in project planning and architectural discussions, provide risk-based security analysis, and ensure cybersecurity requirements are embedded into design, development, and delivery decisions.
- Provide structure.
- Security reporting, track remediation efforts, and support cross-functional project management activities to ensure application security initiatives are delivered on time and aligned with business objectives.
Vacancy posted 1 day ago
Similar jobs that could be interesting for youBased on the Application Security Analyst in New York, NY vacancy
- ...Application Security Analyst (AI Training) About the Role We're partnering with leading AI research labs to build the next generation of security-aware AI systems - and we need people who truly understand how software breaks in the real world. As an Application...SuggestedHourly payOngoing contractContract workFreelanceRemote workFlexible hours
Alignerr
New York, NY2 days ago $99.2k - $148.8k
DescriptionThe Applications Analyst III supervises and provides technical guidance to the staff in the development of specifications for new... ...preferred.Five years of solid, diverse work experience in ITEpic Security Certification and experience required.Employer...SuggestedTraineeshipWork experience placementLocal areaRemote work$75k - $95k
About the role: We are seeking an Application Security Analyst to build security into how we ship software, and to help our small but growing Information Security team with day-to-day work. This is a hands-on role. You will secure code, fix pipelines, manage security tools...SuggestedWork at officeRemote workFlexible hours$75k - $110k
...a rate of 15 days per year, in accordance with Sound's PTO policy Ten company-paid holidays per year About the Role The Application Security Analyst helps embed security into the software delivery lifecycle by partnering with development, platform, cloud, and security...SuggestedLocal areaImmediate startRemote workFlexible hours- To enhance the software delivery lifecycle, the full-time remote Application Security Analyst will integrate security controls into CI/CD pipelines, partner with development teams to mitigate security risks, and conduct application security assessments. Key responsibilities...SuggestedFull timeRemote work
- Software Guidance & Assistance, Inc., (SGA), is searching for an Application Security Vulnerability Analyst for a contractor assignment with one of our premier Insurance Services clients. This is a remote role; candidates must work EST business hours. Responsibilities...For contractorsRemote work
- Guardian is seeking an experienced professional to lead vulnerability analysis and risk assessment within its application security program. You will review findings from SAST/SCA tools, evaluate risk beyond CVSS, and provide actionable remediation guidance to developers...
- Application Security Risk & Automation Analyst We are seeking an experienced Application Security Risk & Automation Analyst to support the automation and operationalization of Secure Software Development Lifecycle (Secure SDLC) processes and application security capabilities...
$75k - $85k
...IT Security Analyst Who is Gen II? Gen II is a leading fund administration provider focused entirely on serving private capital asset... ...will also include auditing and reporting of systems and applications. What you’ll be doing Actively monitor and support...Full timeWork at officeFlexible hours1 day per weekGen Ii Careers
New York, NY29 days ago- ....Success Academy is growing rapidly and security is at the forefront of enabling that growth. We are seeking a Senior Security Analyst to join our Information Security & Privacy... ...built around cloud and SaaS based applications, operates networking and in-school technologies...Work at officeImmediate startVisa sponsorship3 days per week
$97.59k - $142.99k
...We have an exciting opportunity to join our team as a Sr. II Security Analyst - Vulnerabilities. In this role, the successful analyst will... ...remediation efforts with infrastructure teams and application ownersAnalyze threat intelligence reports, write risk analysis...Full time- Must-Have Skills & Tools: ~1-3 years experience if Okta heavy; 4-5 for generic identity support ~ Okta or Okta workflows experience ~ End-User Support Experience ~ Experience in any of the following: SSO, Authenticator Registration, Phishing Authenticator...
3B Staffing LLC
New York, NY1 day ago - ...Nessus, NMAP, ZAP, BurpSuite, Invicti, Nuclei or other scanning tools. Web application scanning and web application firewalls. Containers. CIS benchmarks, STIGs, or other security hardening standards. Additional desirable skills or experience: SAML...
The Dignify Solutions, LLC
New York, NY18 hours ago - ...Security Analyst The Security Analyst is responsible for managing third-party vulnerability data, executing scans using Sompo’s proprietary... ...as well as industry-standard platforms. Support web application scanning and collaborate on web application firewall (WAF) improvements...
Argyle Infotech
New York, NY2 days ago $100k - $140k
...Security Analyst Artemis is building the future of AI-driven defense - helping companies detect and defend themselves effectively in an era where AI is fighting AI on the cyber battlefield. We're looking for a Security Analyst to be at the core of what we do: reviewing...Artemis Security
New York, NY5 days ago- ...Security Analyst Job Location: NYC, NY (Looking for local Candidate - MUST be able to onsite interview for this role in NYC) Job Type... ...infrastructure and services Previous hands on experience in application or network penetration testing Strong knowledge industry standards...Contract workWork experience placementLocal area
ClifyX
New York, NY1 day ago $135k - $140k
...creativity and knowledge emerge to deliver excellence, advancing the community that is uniquely Richemont Americas. Senior Security Operation Center (SOC) Analyst - L2Cyber | New York, NYReports to: Cyber Incident Response ManagerRole OverviewWe are looking for a Senior SOC...Permanent employmentFull timeLocal areaFlexible hours$117.2k - $176.7k
...are the future of Salesforce.The ExperienceEnterprise Security is looking for a Senior Analyst to support our Business Information Security Officers... ...AccommodationsIf you need a reasonable accommodation during the application or the recruiting process, please submit a request via...Full time$145k - $165k
...Our client, a professional services company located in NY, NY is looking to hire a full time Security Analys t. This role collaborates with the Director of Infrastructure & Security to enhance and maintain the Firm's Information Security and Management System. The individual...Full timeWork at officeRemote workVelocity Search Group
New York, NY5 days ago- ...Role: IT Security Analyst Location: NYC, NY ( Hybrid Role ) Job Description The Security analyst is an integral... ...will also include auditing and reporting of systems and applications, and maintenance of robust business continuity and disaster...Flexible hours
ACI Infotech
New York, NY1 day ago - Job-ID31409788Reference25-31660Title : SOC Analyst Location : New York City, Boston MA, Atlanta GA Shift : 3PM to 12AM EST Mon - Fri &... ...SOC Analyst serves as the first line of defense for information security operationsmonitoring, investigating, and responding to...Shift work
$145k - $170k
CLEAR is building THE secure identity company of the future. Our mission is to make experiences... ...is seeking a Senior Security Operations Analyst III to join our SOC team to help... ...commission, Restricted Stock Units. Qualified applicants will receive consideration for...Casual workWork at officeFlexible hours- ...Security Analyst Full-time Onsite - NYC No 3rd parties please. This role is not eligible for employment-based immigration sponsorship. Applicants must be legally authorized to work in the United States without employer sponsorship, now or in the future....Full timeVisa sponsorship
Perennial Resources International
New York, NY4 days ago - ...Security Operations Analyst (AI Training) About the Role We're partnering with the world's leading AI research labs to build the next generation of AI-powered security operations tools. As a Security Operations Analyst, you'll bring your real-world SOC experience...Hourly payOngoing contractContract workFreelanceRemote workFlexible hours
Alignerr
New York, NY2 days ago $103k - $164k
...a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships... ...-based, inclusive, equal opportunity employer that considers applicants without regard to gender, gender identity, sexual orientation,...Full timePart timeLocal areaWorldwideFlexible hours$90k - $110k
...Job Title: Security & Compliance Analyst Location: Home Office Compensation: $90,000 - $110,000 per year Who We Are On the Go has elevated... ...proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard...Home officeOTG
New York, NY5 days ago$153k - $215k
...monitoring, and agentic systems for always-on visibility into our compliance posture. Work directly with Engineering to embed security and privacy controls into our products, including deletion pipelines, PII detection, access audit logging, and fine-grained data access...Contract workWork at officeFlexible hoursLangChain
New York, NY4 days ago$150k - $175k
...wait to learn more about you.Role SummaryThe Asset-Backed Securities Trader/Analyst is responsible for identifying and sourcing attractive investment... ....This position is not eligible for visa sponsorship. Applicants must be authorized to work in the U.S. without visa...Full timeWork at officeLocal area- Network Security Analyst Austin, Texas, United States Requirement Details: Internal job ID: TWK_2002 State of Texas Austin, TX 78701 NOTE... ...assisting in conducting vulnerability scans of networks and applications to assess effectiveness and identify weaknesses; assist in identifying...Local areaRemote work
$191k - $305k
...this role:Wells Fargo is seeking a Senior Lead Information Security Analyst in Cybersecurity to join the IAM Strategic Enablement & Adoption... ....In this role, you will:Partner with Lines of Business, application teams, and IAM product owners to drive adoption and effective...Full timeWork experience placementRelocation package
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Application Security Analyst. Be the first to apply!
Related searches
- clinical applications analyst New York, NY
- application security analyst New York, NY
- epic application analyst New York, NY
- application support analyst New York, NY
- sql database developer analyst New York, NY
- software analyst New York, NY
- software configuration analyst New York, NY
- software development analyst New York, NY
- application analyst New York, NY
- entry level information security analyst New York, NY