App Security Analyst: Code Review & Vulnerability Mgmt

JPS Tech Solutions Pvt Ltd

Cary (NC)

On-site

USD 90,000 - 130,000

Full time

2 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

JPS Tech Solutions Pvt Ltd in Cary, NC seeks an experienced Information Security Analyst with 5+ years in application security, code analysis, and vulnerability management. You will analyze scan results from Veracode and SonarQube, perform manual code reviews, and guide remediation with development teams to strengthen secure coding practices.

Responsibilities include translating findings into Jira stories in SAFe, maintaining security policies in Confluence, and reporting status to the

Qualifications

Minimum 5+ years of experience in Information Security, Application Security, or Vulnerability Management.
Strong experience in manual code audits, code reviews, vulnerability analysis, and remediation.
Hands‑on experience with Veracode and SonarQube for code scanning and security assessments.
Strong knowledge of Java programming and secure coding practices.
Knowledge of OWASP Top 10, CERT/CC, MITRE, Sun, and NIST security standards and guidelines.
Experience with Atlassian tools, including Jira, ServiceDesk, and Confluence.
Understanding of authentication, authorization, session management, and secure communication protocols.
Experience with Windows and Linux operating systems.
Experience working with Oracle and Microsoft SQL Server databases.
Knowledge of third‑party library security analysis and vulnerability identification.
Strong analytical, troubleshooting, communication, and collaboration skills.

Responsibilities

Analyze code scan results from Veracode and SonarQube and identify security vulnerabilities.
Perform manual code reviews, security audits, and vulnerability assessments.
Assess security risks and prioritize remediation based on severity and business impact.
Convert security findings into actionable user stories and tasks in Jira, following SAFe practices.
Develop and maintain security policies, procedures, and best practices in Confluence.
Monitor remediation progress and validate fixes through subsequent code scans.
Collaborate with development teams to implement secure coding practices.
Provide regular security status reports and progress updates to the Information Security Manager.
Identify security risks in third-party libraries and application dependencies.
Support application security improvements across development and deployment processes.