133 application security analyst jobs at 105 companies in United States

PromotedHiringCafe
Founding Backend / Infra Engineer
Cupertino, CA, US
$160k-$300k/yr On-SiteFull Time
HiringCafe
HiringCafe: Building a 100× better job search engine to take on Indeed and LinkedIn.
Own the crawlers, pipelines, and infrastructure powering a real-time job search engine. Strong Node.js and Python fundamentals; bonus points for security and reverse-engineering chops.
Node.js, Python, Elasticsearch, Redis
1w
Save
Mark Applied
Hide
Application Security Analyst
United States
$75k-$110k/yr RemoteFull Time
Sound Physicians
Sound Physicians: Physician-led medical group providing clinical services to hospital partners.
4+ YOE4+ years application security experience, strong app/cloud security knowledge, secure coding and DevSecOps skills, familiarity with SAST/DAST/SCA, CI/CD, container security, and scripting.
Azure, AWS, Azure DevOps, GitHub Actions, GitLab CI, Jenkins, Veracode, Checkmarx, Fortify, SonarQube, Snyk, Mend, Burp Suite, Rapid7 InsightAppSec, Python, Powershell, Bash, Docker, Kubernetes, OpenShift, AKS, EKS, GKE, Terraform, Java, JavaScript, C#, Go, OWASP Top 10, OWASP API Security Top 10, MITRE ATT&CK, NIST Cybersecurity Framework
2mo
Save
Mark Applied
Hide
Application Security Analyst
Plano, Texas, United States
OnsiteFull Time
Toyota
ToyotaNYSE: TM: Designs and manufactures vehicles and provides automotive financial services.
3+ YOE3-6 years in application security; experience with SAST/DAST/SCA; code review; CI/CD; cloud security; IaC; strong QA of web, APIs, and mobile apps.
SAST, DAST, SCA, Jenkins, Harness, GitHub Actions, Docker, Kubernetes, AWS, Azure, GCP, Terraform, Ansible, OWASP, Java, Python, Bash/Shell Scripting, PHP, JavaScript
1w
Save
Mark Applied
Hide
Application Security Analyst
United States
$75k-$110k/yr RemoteFull Time
Sound Physicians
Sound Physicians: Physician-led medical group providing comprehensive hospital-based clinical services.
4+ YOE4+ years application security or related experience, bachelor’s in CS/InfoSec or related, knowledge of SAST/DAST/SCA/IaC, cloud and CI/CD security, scripting, and vulnerability management.
Azure, AWS, Azure DevOps, GitHub Actions, GitLab CI, Jenkins, Veracode, Checkmarx, Fortify, SonarQube, Snyk, Mend, Burp Suite, Rapid7 InsightAppSec, Python, Powershell, Bash, Docker, Kubernetes, OpenShift, AKS, EKS, GKE, Terraform, Java, JavaScript, C#, Go, OWASP Top 10, OWASP API Security Top 10, MITRE ATT&CK, NIST Cybersecurity Framework
1mo
Save
Mark Applied
Hide
Application Security Analyst
Lake Forest or Illinois or Wisconsin
$68k-$109k/yr HybridFull Time
Consumers Credit Union
Consumers Credit Union: Provides member-owned banking and personal financial services.
2+ YOE2+ years application security or secure development experience; SAST/DAST testing, vulnerability analysis, WAF configuration, API security, strong communication; bachelor's preferred or 4+ years experience in lieu; CSSLP/CASE/GWEB preferred.
Veracode, Checkmarx, Burp Suite, Web Application Firewall (WAF), OAuth, OWASP Top 10, SANS CWE Top 25
1mo
Save
Mark Applied
Hide
Application Security Associate/Analyst
Cleveland, Ohio, United States
$73k-$102k/yr OnsiteFull Time
Federal Reserve System
Federal Reserve System: The central bank of the United States.
0+ YOEIdentify and remediate application security issues across the SDLC; perform penetration testing; knowledge of application security controls, cloud platforms, and OWASP Top 10; varying degree/experience combinations for associate and analyst levels.
Open Web Application Security Project (OWASP) Top 10
1mo
Save
Mark Applied
Hide
Application Security Analyst
Nashville or San Diego or United States
$79k-$85k/yr HybridFull Time
HealthStream
HealthStreamNASDAQ: HSTM: Provides workforce management and provider solutions for healthcare organizations.
2+ YOEBachelor's degree or equivalent experience; 2+ years in application security or security-focused software development; knowledge of OWASP Top 10, SAST/DAST/IAST tools, cloud security (AWS/Azure), CI/CD integration, API security, and scripting (Python, JavaScript, Java, Go).
OWASP Top 10, OWASP SAMM, NIST, CIS Controls, SAST, DAST, IAST, Synk, Snyk, Invicti, Checkmarx, SonarQube, Burp Suite, DefectDojo, CI/CD, DevSecOps, AWS, Azure, RESTful, Python, JavaScript, Java, Go, IAM, OAuth, OpenID Connect, HIPAA, SOC 2, HITRUST, FedRAMP
2w
Save
Mark Applied
Hide
Analyst, Application Security
Jacksonville or Provo
OnsiteFull Time
Intercontinental Exchange
Intercontinental ExchangeNYSE: ICE: Operates global financial exchanges, clearing houses, and mortgage technology.
Hands-on application security: secure design reviews, code analysis, SAST/DAST/Software Composition tooling, penetration testing, CI/CD integration; software engineering experience (Java, C++, .NET); university degree in related discipline.
Java, C++, .NET, SAST, DAST, Software Composition, Web Application Firewall (WAF), CI/CD
1mo
Save
Mark Applied
Hide
Application Security Analyst
Auburn Hills, Michigan, United States
OnsiteFull Time
Stellantis
StellantisNYSE: STLA: Designs and manufactures vehicles for diverse global automotive brands.
3+ YOEBachelor's in CS/IT, 3+ years application security/DevSecOps experience, hands-on SAST/DAST/IAST/SCA/mobile testing, secure code review in Java/C#/Python, CI/CD tooling, WAF, cloud (AWS/Azure/GCP), containers, strong communication.
SAST, DAST, IAST, SCA, mobile security, Jenkins, GitLab, GitHub Actions, TeamCity, Checkmarx, GitHub Advanced Security, Burp Suite, Akamai, Cloudflare, AWS WAF, Azure Front Door, AWS, Azure, GCP, Docker, Kubernetes, Java, C#, Python, JavaScript, SQL, HTML, Bash
1w
Save
Mark Applied
Hide
IT Application Security Analyst
Bethlehem, Pennsylvania, United States
OnsiteFull Time
Scandinavian Tobacco Group
Scandinavian Tobacco GroupNasdaq Copenhagen: STG: Manufactures and sells premium cigars and pipe tobac products globally.
3+ YOE3+ years application security or secure software engineering experience; hands-on SDLC/secure-development frameworks, SAST/DAST/SCA tool integration, knowledge of PCI DSS and privacy regs, strong communication.
SAST, DAST, SCA, Snyk, Checkmarx, CI/CD, Vault, Azure Key Vault, NIST SSDF, OWASP ASVS, OWASP Top 10
1mo
Save
Mark Applied
Hide
Senior Application Security Analyst
Olympia, Washington, United States
$114k-$124k/yr HybridFull Time
Washington Health Benefit Exchange
Washington Health Benefit Exchange: Operates Washington state's health insurance enrollment marketplace.
7+ YOE7+ years in information security with application security, secure SDLC, DevSecOps, cloud/Azure experience; experience with code reviews, threat modeling, vulnerability management, and tools like Nessus, Rapid7, Nmap, and Burp Suite.
Microsoft Azure, Nessus, Rapid7, Nmap, Burp Suite, Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), CI/CD, OWASP, STRIDE, MITRE ATT&CK, Security Information and Event Management (SIEM), Endpoint Detection & Response
1mo
Save
Mark Applied
Hide
Senior Application Security Analyst
Olympia, Washington, United States
$114k-$148k/yr HybridFull Time
Washington State Department of Ecology
Washington State Department of Ecology: Provides environmental regulation and conservation services for Washington state.
7+ YOE7+ years information security experience in application security, vulnerability management, penetration testing or related areas; strong secure SDLC, cloud/DevSecOps, threat modeling, code review, and remediation skills; familiarity with NIST/OWASP and regulatory requirements.
Microsoft Azure, Nessus, Rapid7, Nmap, Burp Suite, SAST, DAST, SCA, STRIDE, MITRE ATT&CK, Security Information and Event Management (SIEM), Endpoint Detection & Response (EDR)
2w
Save
Mark Applied
Hide
Analyst, Application Security
Jacksonville, Florida, United States
OnsiteFull Time
Intercontinental Exchange
Intercontinental ExchangeNYSE: ICE: Operates global financial exchanges, clearing houses, and mortgage platforms.
Requires software engineering experience (Java, C++, .NET), SAST/DAST/Software Composition tool expertise, CI/CD integration experience, familiarity with cloud application development, and a university degree in a related discipline.
Java, C++, .NET, SAST, DAST, Software Composition, Web Application Firewall (WAF), CI/CD
3d
Save
Mark Applied
Hide
Application Security Analyst – Snyk Migration & Onboarding
United States
$108k-$128k/yr OnsiteFull Time
Cognizant
CognizantNasdaq: CTSH: Provides global information technology and business process outsourcing services.
5+ YOE5+ years in application security or security tooling administration; hands-on Snyk/Veracode experience; migration/onboarding experience; strong communication, documentation, and stakeholder management skills.
Snyk, Veracode
2w
Save
Mark Applied
Hide
Application Security Analyst – Snyk Migration & Onboarding
United States
$108k-$128k/yr OnsiteFull Time
Cognizant
CognizantNASDAQ: CTSH: Provides IT consulting and technology services to global enterprises.
5+ YOE5+ years application security experience, hands-on Snyk/Veracode, experience with security tool migrations/onboarding, vulnerability management knowledge, strong communication and documentation skills.
Snyk, Veracode
1mo
Save
Mark Applied
Hide
Senior Application Analyst: Epic Security
Robbinsdale or Maple Grove or Minnesota or Wisconsin
$42-$63/hr HybridFull Time
North Memorial Health
North Memorial Health: Provides hospital care and clinical medical services.
5+ YOERequires 5+ years in an Epic senior analyst role, certification/associate degree or 3 years related app use, bachelor\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000preferred; expertise in application design/configuration, user security, databases, reporting, and strong analytical and customer service skills.
Epic
4d
Save
Mark Applied
Hide
Associate Security Analyst (Application Security) Contractual -ITDSGGR
Washington, District of Columbia, United States
OnsiteFull Time, Contract
International Monetary Fund
International Monetary Fund: Fosters global monetary cooperation and secures international financial stability.
6+ YOEApply application security knowledge to support vulnerability remediation, integrate security tools into CI/CD, and collaborate with engineering teams; requires experience in application security, familiarity with OWASP/NIST, and programming knowledge.
SAST, DAST, SCA, CI/CD, Java, Python, .NET, ServiceNow, Azure DevOps, Microsoft Azure, Power BI, OWASP Top 10, NIST
4d
Save
Mark Applied
Hide
Security Analyst/Sr. Security Analyst (Application Security)-ITDSGGR (Contractual)
Washington, District of Columbia, United States
OnsiteFull Time
International Monetary Fund
International Monetary Fund: Provides loans and policy advice to stabilize global economies.
4+ YOE4+ years application security and vulnerability management experience (or 10+ with a bachelor), knowledge of OWASP/NIST/ISO frameworks, hands-on SAST/DAST/SCA, scripting (Java, Python, .NET, PowerShell), and stakeholder communication.
ServiceNow, Microsoft Azure, Microsoft Azure DevOps, Microsoft Power BI, Burp Suite, Sonatype Nexus Lifecycle, Checkmarx, Fortify, HCL AppScan, Veracode, Java, Python, .NET, PowerShell, SAST, DAST, SCA
3mo
Save
Mark Applied
Hide
Senior Cyber Security Analyst, Application & Infrastructure
United States
$127k-$165k/yr RemoteFull Time
iRhythm Technologies
iRhythm TechnologiesNASDAQ: IRTC: Provides wearable heart monitors and AI-driven cardiac data analytics.
8+ YOE5-8+ years in cybersecurity with focus on application and infrastructure security; regulated healthcare/medical devices experience; strong knowledge of NIST; FDA 510(k) experience preferred.
Penetration Testing, Threat Modeling, Vulnerability Assessment, NIST Framework
2d
Save
Mark Applied
Hide
Workday/UKG Security Application Analyst, Hybrid, Jacksonville, Baptist Medical Center
Jacksonville, Florida, United States
HybridFull Time
Baptist Health
Baptist Health: Operates hospitals and clinics providing comprehensive medical care.
2+ YOE2+ years supporting Workday or UKG security, strong IAM/RBAC/SoD knowledge, Bachelor's degree, Workday/UKG security certification preferred, experience with integrations, testing, and strong communication skills.
Workday, UKG, Microsoft Teams, Microsoft Visio
2mo
Save
Mark Applied
Hide
Application Analyst II
West Orange, New Jersey, United States
$91k-$129k/yr OnsiteFull Time
RWJBarnabas Health
RWJBarnabas Health: Provides comprehensive academic healthcare services and medical research.
Design, develop, and maintain custom software applications; project management; user support; QA/testing; HIPAA/data security awareness.
SQL, Java, JavaScript, Ruby, Python, R, Tableau, Epic Clarity, Epic Caboodle, Cogito