Senior Cloud Application Security Analyst
About the role
The Senior Security Analyst / AppSec Specialist is a hands-on, high-impact role responsible for strengthening application security posture, driving vulnerability management maturity, and supporting security operations across PowerPlan's cloud-hosted SaaS environment. This role is embedded within the engineering and operations ecosystem, partnering closely with DevOps, product, and compliance teams.
Responsibilities
Implement a Centralized Application Vulnerability Management Platform (First 120 Days)
Lead the Annual Application + Cloud Penetration Testing Program (Annual Cycle)
Implement a Standardized Security Architecture Review Process (First 120 Days)
Drive Measurable Maturity Improvements Aligned to NIST CSF 2.0 (First 12 Months)
Strengthen Cross-Functional Collaboration Across Dev, CloudOps, IT & Compliance (First 6-9 Months)
Requirements
- Extensive experience with CrowdStrike Falcon, including its Next-Gen SIEM, Data Protection, CSPM, and Threat Intelligence capabilities
- Experience coordinating penetration tests and running vulnerability assessments with Qualys
- Hands-on experience with Rapid7, CI/CD pipeline hardening, cloud security in AWS and/or Azure
- Experience implementing process improvements and driving program maturity aligned with NIST CSF 2.0
Qualifications
- Strong working knowledge of CrowdStrike, Qualys, and/or Rapid7
- Cloud security experience in AWS and/or Azure, including IAM, logging, and posture management
- Familiarity with SOC 2, ISO 27001, and NIST CSF 2.0
- Strong analytical, communication, and documentation skills
- Ability to partner effectively across engineering, DevOps, CloudOps, IT, and compliance teams
- Demonstrated ability to drive process maturity and measurable improvements
Skills
- Excellent communication, problem-solving, and analytical skills
- Ability to work independently and as part of a team
Benefits
- Hybrid role combining onsite work from our corporate office and work from home
- Flexible working arrangements when sensible
- Accommodates onsite work when required for scheduled office days, team meetings, client meetings, or special events
Pay
TBD
Schedule
TBD
Company
PowerPlan specializes in enterprise software solutions used by organizations with complex financial, regulatory, and operational needs. We deliver secure, cloud-hosted SaaS products that help customers manage critical workflows with accuracy, transparency, and compliance. The security team plays a central role in protecting customer trust, enabling rapid product innovation, and ensuring alignment with frameworks such as SOC 2, ISO 27001, and NIST CSF 2.0. We operate in a collaborative environment that values technical depth, continuous improvement, and responsible innovation.