Application Security Analyst

Job Title: Application Security Analyst

Shift/Hours/Days: Hybrid, 2 days onsite, 40 hours per week, Salem, VA

Client Profile

Our client is seeking an experienced Application Security Analyst to support ongoing application security and technology initiatives. This is a long term contract opportunity with potential eligibility for future conversion.

Key Responsibilities

Secure Microsoft Azure development environments, including projects, resource groups, hosting, identity and access, pipelines, configurations, and security controls.

Partner with development and IT teams to integrate application security into software development, build, deployment, and release processes.

Support DevSecOps processes and help ensure development teams follow required application security standards and procedures.

Coordinate application security assessments and testing, including SAST, DAST, software composition analysis, and penetration testing, often with third party partners.

Identify, prioritize, track, remediate, and validate application vulnerabilities, security weaknesses, and process gaps.

Evaluate third party applications, software components, open source dependencies, and AI integrations for security risk.

Maintain assessment records, remediation status, exceptions, and supporting documentation for governance, audit, and continuous improvement.

What You’ll Bring

7 years of experience in application security, cybersecurity, software development, or a related discipline.

Bachelor’s degree in a related technical field, or equivalent education and work experience.

Experience with Microsoft Azure development environments and application security controls.

Strong understanding of the software development lifecycle and DevSecOps. Coding is not required, but you must understand how applications are developed, built, and deployed.

Experience with application security testing, vulnerability assessment, penetration testing, or security remediation.

Ability to work effectively with development teams, application owners, security partners, suppliers, and third party providers.

Knowledge of application security frameworks and standards such as NIST SP 800 171, CRA, or SOC 2 is preferred.

Apply Now and Make Your Next Career Move with Us!

www.wfunlimited.com