Application Security Analyst (1477567)

JOB DESCRIPTION

• Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Client . As one of the world’s most admired brands, Client is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for diverse, talented team members who want to Dream. Do. Grow. with us.
• What we’re looking for    We are seeking a skilled and proactive Application Security Analyst to integrate security practices into our DevOps processes. The ideal candidate will work closely with development and operations team to ensure secure software delivery pipelines, automate security controls, and foster a culture of shift left in the organization.
• What you’ll be doing    •    Design, implement, and maintain secure CI/CD pipelines.
• JAVAIntegrate security tools (SAST, DAST, SCA, etc.) into development workflows.
• JAVACollaborate with development and operations teams to remediate vulnerabilities.
• JAVAAutomate security testing and compliance checks.
• JAVAMonitor and respond to security incidents in cloud and container environments.
• JAVADevelop and enforce security policies, standards, and procedures.
• JAVAStay current with emerging security threats and DevSecOps best practices.
• JAVARequirements:
• Qualifications/ What you bring (Must Haves) – Highlight Top 3-5 skills    JAVABachelor’s degree in Computer Science, Cybersecurity, or related field.
• JAVA3+ years of experience in DevOps, Security Engineering, or related roles. 2-3 years of security experience. Overall, 6 years
• JAVAStrong understanding of CI/CD tools (e.g., Jenkins, Harness).
• JAVADevelopment knowledge on JAVA, Python, .Net, etc
• JAVAExperience with security tools (e.g., Veracode, GHAS, Orca).
• JAVAProficiency in scripting languages (e.g., Python, Bash).
• JAVAFamiliarity with containerization and orchestration (Docker, Kubernetes).
• JAVAKnowledge of cloud platforms (AWS, Azure, GCP) and their security features.
• JAVAUnderstanding of secure coding practices and application security principles.
• JAVAKnowledge of Infrastructure as Code (Terraform, Ansible).