Application Security Analyst

Insight Global (United States); Toronto; On-site; CAD 120,000 - 160,000; Full time

Job summary

Insight Global is seeking an experienced Application Security Analyst to act as a security advisor within a large banking environment. You will partner with development and technology teams to assess vulnerabilities, review testing results, and guide remediation strategies.

The role requires hands-on experience with SAST/DAST/SCA, vulnerability management, and software development in Python/Java/.NET. Strong communication skills and experience in regulated environments are essential.

Qualifications

• 5+ years of experience in Application Security Testing, including SAST, DAST and SCA.
• Strong vulnerability management experience with prioritization and tracking.
• Software development experience in Python, Java, or .NET.
• Hands-on experience reviewing and triaging security scan findings.
• Ability to communicate security findings and remediation to developers and business stakeholders.
• Experience validating false positives and determining true risks.
• Experience in reporting discrepancies between security findings and development assessments.
• Experience with AI/LLM security testing and AI-enabled application risks.
• Experience in banking, financial services, or highly regulated environments.

Responsibilities

• Act as a security advisor and partner with development and technology teams.
• Assess application security vulnerabilities and review testing results.
• Help teams understand risks and remediation strategies and triage findings.
• Communicate risk, impact and recommended fixes to technical stakeholders.

Skills

SAST

DAST

SCA

Vulnerability management

Python

Java

Java/.NET

Security testing reviews

AI/LLM security

Stakeholder communication

Job description

Job Description

We are looking for an experienced Application Security Analyst to act as a security advisor supporting another line of business within a large banking environment. This individual will partner closely with development and technology teams to assess application security vulnerabilities, review security testing results, and help teams understand and remediate identified risks.

The ideal candidate will have strong hands-on experience with application security testing, vulnerability management, and software development, along with the communication skills needed to clearly explain security findings and recommendations to development and business stakeholder to remediate/triage findings.

Skills and Requirements

• 5+ years of experience within Application Security Testing, including:SAST (Static Application Security Testing)DAST (Dynamic Application Security Testing)SCA (Software Composition Analysis)
• Strong vulnerability management experience, including reviewing, assessing, prioritizing, and tracking application security vulnerabilities.
• Previous software development experience with one or more of:PythonJava.NET
• Hands-on experience reviewing and triaging application security scan findings.
• Ability to work with development teams to determine appropriate remediation strategies for identified vulnerabilities.
• Experience validating false positives raised by development teams and determining whether findings represent legitimate security risks.
• Experience providing reporting and documentation around discrepancies, including situations where security scan results and development team assessments do not align.
• Strong understanding of application security vulnerabilities and the ability to communicate the risk, impact, and recommended remediation to technical stakeholders.
• Strong communication and advisory skills, with the ability to effectively deliver security findings and recommendations to another line of business.
• Experience with AI / LLM security testing.
• Exposure to assessing security risks associated with AI-enabled applications or Large Language Models.
• Experience working in a banking, financial services, or highly regulated enterprise environment.
• Experience operating in an application security advisory or consulting capacity.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].