Mid-Level Application Security Analyst

Position Summary

The Application Security Analyst III is an experienced cybersecurity professional responsible for advanced application security analysis, risk-based prioritization, remediation coordination, secure development support, reporting, and process improvement. This role works closely with security leadership, application teams, software developers, infrastructure teams, compliance teams, and business stakeholders to reduce enterprise application risk. The analyst provides technical guidance, supports program maturity, and helps ensure application security practices align with organizational risk tolerance, regulatory requirements, secure development practices, and security standards.

Responsibilities

• Lead application security analysis across web applications, APIs, mobile applications, enterprise systems, cloud-based applications, and third-party solutions.
• Evaluate application security findings based on severity, exploitability, data sensitivity, exposure, business impact, compensating controls, and threat context.
• Develop, coordinate, and validate risk-based remediation efforts for application teams, developers, vendors, and business stakeholders.
• Support application security metrics, dashboards, executive summaries, and audit evidence.
• Contribute to application security standards, procedures, playbooks, secure development guidance, and continuous improvement efforts.
• Provide guidance and mentorship to junior analysts.

Basic Qualifications

• Minimum 5 years of cybersecurity, application security, software development, vulnerability management, security operations, or related experience.
• Advanced cybersecurity, application security, secure software development, or information security certification. A relevant degree may qualify in lieu of certification.
• Strong knowledge of application security lifecycle processes, including intake, assessment, analysis, prioritization, remediation, validation, and reporting.
• Hands-on experience administering, engineering, or supporting application security platforms.
• Ability to assess risk using vulnerability data, threat context, application criticality, data sensitivity, exposure, and business impact.
• Experience preparing reports, metrics, and recommendations for technical and leadership audiences.
• Strong analytical, communication, and stakeholder management skills.

Preferred Qualifications

• Bachelor's degree in cybersecurity, information technology, computer science, software engineering, or a related field.
• Familiarity with NIST guidelines, CIS Controls, ISO 27002, CMMC, and/or other regulatory and security frameworks.
• Experience with secure software development lifecycle practices, application architecture review, cloud application security, API security, or third-party application risk.
• Strong understanding of web applications, APIs, authentication, authorization, secure coding, data protection, application architecture, cloud-based applications, and secure configuration practices.
• Experience with scripting, automation, data analysis, and/or API-based reporting.