App Security Data Analyst — Vulnerability Insights

Axiom Path; Town of Charlotte (NY); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Axiom Path is seeking an experienced application security and data professional to improve security data governance and vulnerability management across a complex enterprise. The role focuses on reducing false positives, protecting sensitive information, and aligning security with the SDLC.

You will analyze vulnerability data, investigate sensitive-secrets findings, and collaborate with stakeholders to translate technical risks into business language while navigating code repositories and PRs in

Qualifications

• Foundational experience in cybersecurity, application security, vulnerability management, or related fields.
• Understanding of source-control management: repositories, check-in/out, pushes, pulls, PRs.
• Knowledge of secrets (credentials, API keys, tokens) in software environments.
• Familiarity with SDLC and secure SDLC concepts.
• Understanding of common application-security vulnerabilities and risk translation.
• Knowledge of data governance and PHI concepts.
• Foundational cybersecurity principles: confidentiality, integrity, availability.
• Ability to explain SaaS and DaaS concepts.
• Ability to relate applications, repositories, changes, and findings.
• Clear communication of technical concepts to varied audiences.

Responsibilities

• Analyze application security and vulnerability data to distinguish legitimate security risks from false-positive findings.
• Support efforts to investigate findings involving exposed secrets, credentials, tokens, passwords, SaaS applications, and other application security vulnerabilities.
• Navigate source-control repositories and review information associated with code changes, repositories, commits, pushes, pulls, and pull requests.
• Partner with technical and security stakeholders to understand vulnerabilities and communicate findings in clear business and technical language.
• Apply secure SDLC concepts when evaluating application and software-development risks.
• Support data-governance activities involving sensitive information, including PHI and other protected data.
• Help categorize, explain, and prioritize security risks using foundational cybersecurity principles.
• Contribute to improving the accuracy and effectiveness of vulnerability-management processes.

Skills

Cybersecurity

Application security

Vulnerability management

Software development

Data analysis

Source control management

Tools

Git

Job description

Axiom Path is seeking an experienced application security and data professional to improve security data governance and vulnerability management across a complex enterprise. The role focuses on reducing false positives, protecting sensitive information, and aligning security with the SDLC.

You will analyze vulnerability data, investigate sensitive-secrets findings, and collaborate with stakeholders to translate technical risks into business language while navigating code repositories and PRs in