Assoc, Info Systems Security

Accountabilities

• Monitor application, API, cloud, and code security platforms to identify, assess, and prioritize vulnerabilities, risks, and misconfigurations.
• Collaborate with development, DevOps, and security teams to drive remediation efforts and strengthen the security of applications and APIs.
• Administer and maintain application security tools, including platform configuration, asset onboarding, user access management, and feature adoption.
• Develop dashboards, reports, and security metrics to communicate risk exposure, remediation progress, and security performance to technical teams and leadership.
• Support the integration of security controls into CI/CD pipelines, software development lifecycles, and modern engineering workflows.
• Help define, implement, and maintain application security standards, policies, and best practices across the organization.
• Assist with monitoring external application exposure and improving detection and response capabilities alongside security operations teams.
• Contribute to securing AI-enabled applications, APIs, and large language model (LLM) implementations by identifying risks and recommending appropriate security controls.

Requirements

• Bachelor's degree in Information Security, Computer Science, Information Systems, or a related field.
• 2+ years of professional experience in application security or a related cybersecurity role.
• Strong understanding of secure software development principles and common application vulnerabilities, including OWASP Top 10 and CWE.
• Hands-on experience with application and API security testing tools such as SAST, DAST, SCA, secret scanning, or similar security platforms.
• Knowledge of web technologies, APIs, cloud-native applications, and modern software architectures.
• Familiarity with programming or scripting languages such as Python, Java, JavaScript, C#, or similar.
• Understanding of cybersecurity frameworks such as NIST, CIS Benchmarks, ISO 27001, or SOC 2.
• Excellent analytical, communication, and problem-solving skills, with the ability to explain technical concepts to both technical and non-technical stakeholders.

Preferred Qualifications

• Security+, CSSLP, or GIAC certifications.
• Scripting or automation experience.
• Cloud application security expertise.
• Familiarity with AI security, generative AI, or LLM technologies.

Benefits

• Remote work opportunity within the United States, with flexibility based on business needs.
• Competitive annual salary ranging from $76,800 to $105,600, based on experience and qualifications.
• Opportunity to work with modern application security, cloud, API, and AI technologies.
• Professional growth within a collaborative and high-performing cybersecurity team.
• Inclusive work environment focused on innovation, teamwork, and continuous learning.
• Comprehensive employee benefits package, including health and wellness programs, retirement savings options, paid time off, and additional company-sponsored benefits.