Application Security Analyst

Stellantis; Auburn (AL); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Comprehensive health & well-being

Generous PTO

Retirement savings plan

Income protection & insurance

Car lease program

Family building benefits

Growth & giving back

Job summary

Stellantis is seeking an Application Security engineer to identify, analyze, and mitigate vulnerabilities across the SDLC. This role supports a Shift Left security approach within DevSecOps, ensuring secure coding practices and automation in CI/CD.

The candidate will perform SAST/DAST/IAST, lead remediation, and collaborate with development teams to implement security controls and policies. On-site in Auburn Hills, MI.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• 3+ years hands-on application security, security testing, and DevSecOps experience.
• Strong understanding of web/mobile architectures, SDLC, and secure coding practices.

Responsibilities

• Perform security testing (SAST/DAST/IAST, mobile security) across SDLC.
• Analyze vulnerabilities and recommend secure coding fixes.
• Lead remediation and drive closure in CI/CD pipelines.
• Lead WAF deployments and implement security controls.
• Provide remediation guidance and training to development teams.

Skills

Security testing

Secure coding

Communication

Threat modeling

Education

Bachelor's degree in CS/IT

Tools

Jenkins

GitLab

GitHub Actions

TeamCity

Checkmarx

Burp Suite

AWS WAF

Azure/AWS/GCP

Job description

This role focuses on identifying, analyzing, and mitigating application security vulnerabilities throughout the SDLC. It supports a broader “Shift Left” cybersecurity strategy, ensuring security is integrated early in development and reinforced through DevSecOps practices.

Key Responsibilities:

Application Security & Testing

• Perform security testing: SAST, DAST, IAST, mobile security, and dynamic testing
• Analyze vulnerabilities and recommend secure coding fixes
• Demonstrate vulnerabilities to development teams
• Drive remediation efforts to closure
• DevSecOps & Tooling
• Work within CI/CD pipelines using tools such as:
  • Jenkins, GitLab, GitHub Actions, TeamCity
  • Checkmarx, GitHub Advanced Security, Burp Suite
  • Integrate security controls into development workflows
  • WAF & Security Controls
• Lead Web Application Firewall (WAF) deployment for new and existing apps
• Implement application security policies, controls, and standards

Collaboration & Enablement

• Partner with development, platform, and supplier teams
• Provide clear remediation guidance
• Train teams on secure coding and application security practices
• Develop training materials

Assessment & Reporting

• Conduct security assessments using standard tools
• Track and report:
  • Risks
  • Milestones
  • Deliverables
  • Status updates
• Recommend strategies based on application risk posture

This role is based in Auburn Hills, MI and is required to be on-site in our HQ building 5 days per week.

Basic Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, or related field
• 3+ years of hands-on experience in application security, security testing, and DevSecOps

Strong understanding of:

• Application architectures (web, mobile, APIs)
• Software development methodologies (Agile, SDLC)
• Modern programming languages (Java, C#, Python)
• Experience performing and interpreting results from:
  • SAST, DAST, IAST, SCA, and mobile security testing tools
• Hands‑on experience with secure code review in common languages (Java, C#, Python preferred)
• Prior background in application development, including:
  • Compiled code
  • Web applications / services
  • Mobile app development
• Knowledge of security frameworks and standards:
  • NIST, ISO 27001
  • NIST SSDF or similar secure development frameworks
• Strong understanding of:
  • OWASP Top 10 vulnerabilities and mitigation techniques
  • Common attack vectors (web exploits, DDoS, bot attacks)
• Experience with WAF technologies:
  • Akamai, Cloudflare, AWS WAF, Azure Front Door
• Familiarity with cloud platforms and modern environments:
  • AWS, Azure, GCP
  • Containers (Docker, Kubernetes)

Working knowledge of:

• Programming/scripting: Java, JavaScript, SQL, HTML
• Scripting languages (Python, Bash preferred)
• Strong analytical, problem‑solving, and communication skills
• Ability to explain technical risks to non‑technical audiences
• Experience writing security reports and documentation
• Ability to work independently and cross‑functionally

Preferred Qualifications:

• Industry certifications:
  • GIAC GWEB
  • ISC2 CSSLP
  • EC‑Council CASE
  • Or equivalent AppSec certifications

Our Benefits — Designed with You in Mind

Comprehensive Health & Well-being Coverage
From your very first day, you'll have access to medical, dental, vision, and prescription drug coverage — ensuring you and your family stay healthy and protected.

Generous Paid Time Off
We believe in work-life balance. That's why we offer: 17+ paid holidays, including shut-down from December 24th through New Years Day every year. Vacation, float & wellbeing days, sick time and fully paid parental leave when your family needs you most.

Competitive Retirement Savings Plans
We help you plan for the future with:

• An employer match on contributions to your 401k, Roth, and Catch‑Up plans
• An employer contribution, even if you don't contribute

Income Protection & Insurance Options
Benefit from included and optional disability, life, and other insurance programs — because your peace of mind matters.

Company Vehicle Lease Program
Eligible employees and their immediate families can enjoy company vehicle lease options with included insurance, maintenance, and unlimited mileage. Plus, take advantage of exclusive discounts on Stellantis products.

Family Building Benefit
We proudly support all paths to parenthood- including fertility and infertility treatments, adoption services, and gestational surrogacy.

Support for Your Growth and Giving Back
We believe in investing in your future and your passions:

• Tuition reimbursement
• Student loan refinancing programs
• 18 paid volunteer hours each year to make a difference in your community

And so much more!
When you join us, you're not just building a career — you're joining a company that supports you, inside and outside of work.