Application Security Advocate: SDLC & Automation

CCC Information Services; Chicago Heights (IL); On-site; USD 57,000 - 70,000; Full time

Benefits offered by this job

401K Match

Paid time off

Annual Incentive Plan

Performance Bonus

Comprehensive health insurance

Adoption Assistance

Tuition Reimbursement

Wellness Programs

Stock Purchase Plan options

Employee Resource Groups

Job summary

CCC Intelligent Solutions Inc. is seeking an Application Security Analyst to embed security across the software development lifecycle. You will collaborate with engineering, product, and platform teams to identify, prioritize, and remediate application security risks throughout the lifecycle.

The role emphasizes vulnerability management, secure coding, and security automation, with a strong technical foundation and cross‑team collaboration to drive risk reduction.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.
• Understanding of OWASP Top 10.
• Experience with security testing tools such as SAST, DAST, SCA, and secrets detection platforms.
• Knowledge of application architectures, APIs, cloud‑native applications, and modern development practices.
• Experience with scripting languages such as Python, PowerShell, JavaScript, Go, or similar.
• Familiarity with CI/CD pipelines and source control platforms such as GitHub, GitLab, or Azure DevOps.
• Strong analytical, troubleshooting, and communication skills.
• Ability to effectively communicate technical findings to both technical and non‑technical stakeholders.

Responsibilities

• Perform application security assessments, including static analysis, dynamic analysis, software composition analysis, and manual validation of findings.
• Review and triage security findings, distinguishing true positives from false positives and helping development teams prioritize remediation efforts.
• Support secure software development lifecycle (SSDLC) initiatives and security‑by‑design practices across engineering teams.
• Conduct threat modeling and security reviews for new applications, services, and technology implementations.
• Partner with development teams to identify security weaknesses and provide remediation guidance.
• Assist with penetration testing coordination and validation of remediation activities.
• Develop and maintain security metrics, reporting, and dashboards related to application security risk.
• Support vulnerability management processes, including identification, prioritization, tracking, and verification of remediation efforts.
• Create automation, scripts, and integrations that improve security workflows and reduce manual effort.
• Evaluate software supply chain risks and support secure use of open‑source components.
• Assist in developing security standards, procedures, and secure coding guidance.
• Deliver security awareness and secure coding training to engineering teams.
• Support incident response activities involving application security vulnerabilities when required.
• Be familiar with AI workflows and enablement.

Skills

Security testing concepts

Vulnerability analysis

Communication skills

Analytical thinking

Scripting knowledge

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology

Tools

SAST

DAST

SCA

Secrets detection tools

GitHub Advanced Security

Burp Suite

Veracode

Checkmarx

Job description

CCC Intelligent Solutions Inc. is seeking an Application Security Analyst to embed security across the software development lifecycle. You will collaborate with engineering, product, and platform teams to identify, prioritize, and remediate application security risks throughout the lifecycle.

The role emphasizes vulnerability management, secure coding, and security automation, with a strong technical foundation and cross‑team collaboration to drive risk reduction.