Application Security Specialist

Remote | Contract | No C2C | Fortune 500 Client

The position will support Application Security team by documenting application security

processes, conducting gap analyses, defining KPIs, and helping implement security tools

across the organization. This person will work between engineering, architecture, security,

and business stakeholders to translate technical requirements into business requirements

and process documentation.

The individual will help evaluate security products, support proof-of-concept (POC)

initiatives, and facilitate conversations with engineering teams to ensure application

security tools and processes are implemented consistently across different brands.

Key Responsibilities

• Document existing application security processes, workflows, and the software

development lifecycle (SDLC).

• Conduct gap analyses to identify process, security, and implementation gaps.

• Define and track KPIs and metrics for application security operations.

• Work with engineers and architects to develop process flows and implementation

documentation.

• Translate technical requirements into clear business requirements and actionable

documentation.

• Facilitate discussions between security teams, engineers, architects, and business

stakeholders.

• Support product selection, tool evaluations, and proof-of-concept (POC) initiatives.

• Coordinate the implementation of application security tools across brands and

business units.

• Help ensure application security practices are integrated throughout the SDLC.

• Support Agile processes and collaborate with technical teams on implementation

planning.

Technical Environment

Candidates should have familiarity with application security processes and tools,

including:

• Source code repositories: GitHub, GitLab

• Application security scanning: Snyk

• Security frameworks: NIST

• Security technologies: Akamai, secrets management, and certificate management

• SDLC: Integrating security into software development and deployment lifecycles

The role is focused on security process ownership, product implementation, and crossfunctional coordination, rather than hands-on software engineering alone.

Ideal Candidate Profile

The strongest candidate will have

• 3+ years of experience in business analysis, product ownership, technical program

delivery, or a similar role within cybersecurity or application security.

• Experience documenting workflows, process flows, requirements, and

implementation procedures.

• A solid understanding of application security and the SDLC.

• Experience working directly with software engineers and technical architects.

• The ability to translate complex technical concepts into business-friendly

documentation.

• Experience conducting gap analyses, defining KPIs, and improving processes.

• Exposure to security tools, vendor evaluations, product selection, or POCs.

• Familiarity with Agile methodologies and cross-functional project delivery.