Analyst - Application Security

TIAA; Pune District; On-site; INR 1,000,000 - 1,600,000; Full time

Job summary

TIAA Global Capabilities in Pune is seeking a Cyber Cloud Security Sr. Analyst to support cloud security strategy, standards, and DevSecOps, implementing controls to integrate cloud services into cybersecurity.

You will review security scans, research vulnerabilities, and partner with development teams on remediation, helping shift security earlier in the developer workflow. 3+ years in application security and experience with SAST/SCA/IAST and containers are required.

Qualifications

• 3+ years of application security experience.
• 1+ years partnering with development teams on secure code review and vulnerability remediation.
• Experience with security tool administration, configuration, and integration.
• Experience with application security scanning tools (SAST, SCA, IAST) such as Snyk, Contrast Security, CxOne.
• Ability to manage priorities, triage requests, and balance operational demands.
• Experience with container technologies such as Docker and Kubernetes.
• Knowledge of cloud platforms and services (AWS, Azure, GCP).
• Knowledge of development pipelines such as Jenkins, ElectricFlow, Azure DevOps etc.
• Experience working in an Agile environment.

Responsibilities

• Contribute to a secure/compliant cloud-native service catalog, repositories.
• Maintain Compliance across our Production, Development and Corporate systems hosted in the public clouds.

Skills

Application security

Secure code review

Security tool administration

SAST SCA IAST (Snyk, Contrast Security

CxOne)

Prioritization & triage

Docker

Kubernetes

AWS

Azure

GCP

Jenkins

ElectricFlow

Azure DevOps

Agile experience

Education

University degree

Tools

Docker

Kubernetes

Jenkins

Azure DevOps

ElectricFlow

AWS

Azure

GCP

Job description

Overall Job Description

• Review and triage application security scan results
• Analyze and research zero-day vulnerabilities
• Partner with development teams on remediation and false positive reviews
• Research, evaluate, and prototype AI/LLM-driven capabilities to advance application security detection, response, and developer experience
• Support and contribute to strategic initiatives that shift security earlier into the developer workflow

Required Knowledge, Skills and Abilities

• 3+ years of application security experience
• 1+ years partnering with development teams on secure code review and vulnerability remediation
• Experience with security tool administration, configuration, and integration
• Experience with application security scanning tools (SAST, SCA, IAST) such as Snyk, Contrast Security, CxOne
• Ability to manage priorities, triage requests, and balance operational demands
• Experience with container technologies such as Docker and Kubernetes
• Knowledge of cloud platforms and services (AWS, Azure, GCP)
• Knowledge of development pipelines such as Jenkins, ElectricFlow, Azure DevOps etc.
• Experience working in an Agile environment

Cyber Cloud Security Sr. Analyst

Cyber Cloud Security Sr. Analyst will work under Sr. team members to support & implement cloud security strategy, standards, procedures, best practices, and DevSecOps. Implement processes and technical controls supporting cloud security standards including integration of cloud services and workloads into corporate cybersecurity services. Ability to identify threat surfaces & identify pro-active & reactive security controls to minimize the overall residual risk.

Key Responsibilities and Duties

• Contribute to a secure/compliant cloud-native service catalog, repositories
• Maintain Compliance across our Production, Development and Corporate systems hosted in the public clouds

Educational Requirements

• University (Degree) Preferred

Work Experience

• No Experience Required

Physical Requirements

• Physical Requirements: Sedentary Work

Career Level

5IC

Overall Job Description

• Review and triage application security scan results
• Analyze and research zero-day vulnerabilities
• Partner with development teams on remediation and false positive reviews
• Research, evaluate, and prototype AI/LLM-driven capabilities to advance application security detection, response, and developer experience
• Support and contribute to strategic initiatives that shift security earlier into the developer workflow

Required Knowledge, Skills and Abilities

• 3+ years of application security experience
• 1+ years partnering with development teams on secure code review and vulnerability remediation
• Experience with security tool administration, configuration, and integration
• Experience with application security scanning tools (SAST, SCA, IAST) such as Snyk, Contrast Security, CxOne
• Ability to manage priorities, triage requests, and balance operational demands
• Experience with container technologies such as Docker and Kubernetes
• Knowledge of cloud platforms and services (AWS, Azure, GCP)
• Knowledge of development pipelines such as Jenkins, ElectricFlow, Azure DevOps etc.
• Experience working in an Agile environment

Related SkillsAccountability, Adaptability, Business Continuity Planning, Cloud Computing Security, Collaboration, Communication, Compliance, Consultative Communication, Cybersecurity, Detail-Oriented, General Risk Management, Network Security, Prioritizes Effectively

Company Overview

TIAA Global Capabilities was established in 2016 with a mission to tap into a vast pool of talent, reduce risk by insourcing key platforms and processes, as well as contribute to innovation with a focus on enhancing our technology stack. TIAA Global Capabilities is focused on building a scalable and sustainable organization , with a focus on technology , operations and expanding into the shared services business space.

Working closely with our U.S. colleagues and other partners, our goal is to reduce risk, improve the efficiency of our technology and processes and develop innovative ideas to increase throughput and productivity.

We are an Equal Opportunity Employer. TIAA does not discriminate against any candidate or employee on the basis of age, race, color, national origin, sex, religion, veteran status, disability, sexual orientation, gender identity, or any other legally protected status.

Our Culture of Impact

At TIAA, we're on a mission to build on our 100+ year legacy of delivering for our clients while evolving to meet tomorrow's challenges. We equip our associates with future-focused skills and AI tools that enable us to advance our mission. Together, we are fighting to ensure a more secure financial future for all and for generations to come. We are guided by our values: Champion Our People, Be Client Obsessed, Lead with Integrity, Own It, and Win As One. They influence every decision we make and how we work together to serve our clients every day. We thrive in a collaborative in-office environment where teams work across organizational boundaries with shared purpose, accelerating innovation and delivering meaningful results. Our workplace brings together TIAA and Nuveen's entrepreneurial spirit, where we work hard and work together to create lasting impact. Here, every associate can grow through meaningful learning experiences and development pathways—because when our people succeed, our impact on clients' lives grows stronger.

Accessibility Support

TIAA offers support for those who need assistance with our online application process to provide an equal employment opportunity to all job seekers, including individuals with disabilities.

If you are a U.S. applicant and desire a reasonable accommodation to complete a job application please use one of the below options to contact our accessibility support team:

Phone: [phone]

Email: [e-mail]

Privacy Notices

For Applicants of TIAA, Nuveen and Affiliates residing in US (other than California), click here.

For Applicants of TIAA, Nuveen and Affiliates residing in California, please click here.

ForApplicants of TIAA Global Capabilities, click here.

For Applicants of Nuveen residing in Europe and APAC, please click here.