AI-Driven Application Security & Risk Analyst

Perennial Resources International; New York (NY); On-site; USD 110,000 - 160,000; Full time

Job summary

Guardian is seeking an experienced professional to lead vulnerability analysis and risk assessment within its application security program. You will review findings from SAST/SCA tools, evaluate risk beyond CVSS, and provide actionable remediation guidance to developers and architects.

You will partner with technology owners to establish remediation plans, track progress, and communicate risk to stakeholders. Strong communication and collaboration across multiple workstreams are essential.

Qualifications

• 3+ years in application security or related cybersecurity discipline.
• Strong understanding of OWASP Top 10 and CWEs.
• Experience interpreting findings from application security tools.
• Experience using AI-based security tools.
• Ability to evaluate findings in context of exploitability, exposure, and business risk.
• Experience working with development teams to remediate vulnerabilities.
• Strong written and verbal communication skills.

Responsibilities

• Review vulnerabilities identified through AI-based SAST, SCA, and related tools.
• Evaluate vulnerabilities beyond vendor severity scores considering exposure, business impact, and compensating controls.
• Validate vulnerability classifications and remediation recommendations; identify false positives.
• Provide actionable remediation guidance and secure coding recommendations.
• Assist application teams in understanding root causes and fixes; align remediation plans with stakeholders.
• Track remediation progress and escalate blockers; ensure closure within SLAs.

Skills

Experience in App Security

Communication skills

Organizational skills

Independent work

Education

Security certifications (Security+, CSSLP, GWAPT, OSWE)

Tools

SAST tools

SCA tools

CI/CD security

Secure code reviews

Job description

Guardian is seeking an experienced professional to lead vulnerability analysis and risk assessment within its application security program. You will review findings from SAST/SCA tools, evaluate risk beyond CVSS, and provide actionable remediation guidance to developers and architects.

You will partner with technology owners to establish remediation plans, track progress, and communicate risk to stakeholders. Strong communication and collaboration across multiple workstreams are essential.