Application Security Analyst

At DHL, our people are our greatest asset. Every team member's contribution helps drive our success as the world's leading logistics company. As a Certified Great Place to Work®, we're committed to fostering a positive, collaborative, and supportive workplace where employees can thrive. Through meaningful engagement, career development opportunities, competitive compensation, and exceptional benefits, we create an environment where both your professional and personal life can flourish.

About the Role

The Application Security Analyst is responsible for ensuring the security of both internally developed and third-party applications. This position focuses on security analysis, risk assessment, and advisory responsibilities rather than hands-on implementation. This role supports secure architecture practices, evaluates the security posture of applications, cloud environments, and AI solutions, and provides visibility into risks and remediation efforts through reporting and governance processes. Working in a fast-paced Agile environment, the Application Security Analyst partners with development, infrastructure, and security teams across the Americas region to support and advance next-generation security solutions.

Responsibilities

• Review and advise on the security architecture of systems, applications, and infrastructure throughout the development lifecycle across on-premises and cloud environments.
• Document, maintain, and improve security and DevSecOps procedures and standards.
• Analyze and assess security testing results, including:
  • Static Application Security Testing (SAST)
  • Dynamic Application Security Testing (DAST)
  • Penetration Testing
• Evaluate findings against industry standards, including the OWASP Top 10.
• Document testing results and residual risks in Governance, Risk, and Compliance (GRC) tools and present findings to IT Security leadership and management.
• Integrate industry best practices with organizational requirements to recommend effective security solutions.
• Support development teams in identifying, understanding, and remediating security vulnerabilities.
• Assist in the creation and review of application security architectures and security concepts.
• Participate in security assessments of AI solutions, including security guardrails and compliance requirements.
• Support internal and external security audits and testing initiatives.
• Contribute to vulnerability management and risk management processes.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field preferred.
• Minimum of 3 years of experience in Application Security, Security Architecture, or DevSecOps required.

Skills

• Required Knowledge & Experience:
  • Strong knowledge of OWASP Top 10 and OWASP ASVS frameworks.
  • Experience with cloud security and AI security standards, including:
    • ISO 27017
    • CSA CCM
    • NIST AI RMF
    • ISO 42001
  • Ability to interpret and understand code in languages such as:
    • Python
    • Java
    • React
    • JavaScript
    • Other commonly used programming languages
  • Strong analytical, organizational, and problem-solving skills.
  • Ability to assess complex technical information and provide recommendations.
  • Excellent written, verbal, and interpersonal communication skills.
  • Strong attention to detail and ability to manage multiple priorities.
  • Proficiency with Microsoft Office Suite (Word, Excel, PowerPoint).
  • Ability to work effectively in a global environment and collaborate across diverse cultures.
• Preferred Experience:
  • Application Security
  • DevSecOps
  • Security Architecture
  • API Security
  • Container Security
  • Modern Identity Frameworks
  • Software Supply Chain Security
  • SAST, DAST, and Penetration Testing methodologies and tools
  • CVSS, GRC platforms, and risk management processes
  • Process automation initiatives
  • Working in global organizations and cross-regional teams
• Preferred Certifications:
  • CISSP
  • CISA
  • CEH
  • OSCP
  • CCSP

Physical Requirements

• Availability for on-call support as needed.
• Ability to travel up to 20%.
• Regular sitting at a workstation for 25-75% of the work shift.
• Frequent standing and walking.

Benefits

• Competitive Pay
• Bonus Programs
• 401(k) with Company Match
• Medical, Dental & Vision Coverage
• Well-Being Programs
• FSA/HSA Options
• Tuition Reimbursement
• Paid Time Off (Vacation & Sick Time)
• Company-Paid & Floating Holidays
• Paid Parental Leave
• Employee Discount Program
• Employee Assistance & Work-Life Program
• Short-Term & Long-Term Disability Coverage
• Company-Paid Life Insurance

Pay

Salary Range:

• $63,300 - $84,400: AL, AR, AZ, ID, IN, ME, MO, MS, NE, NH, NM, OH, OK, SC, TN, WV
• $69,525 - $92,700: CO, CT, DC, FL, GA, IA, KS, KY, MI, MN, NC, NV, OR, PA, TX, UT, VA, WI
• $72,750 - $97,000: DE, IL, MD, RI, WA
• $75,825 - $101,100: CA, MA, NJ, NY