Application Security Analyst

EMCOR Group; Phoenix (AZ); A distancia; USD 98.000 - 116.000; Jornada completa

Descripción de la vacante

EMCOR Group, Inc. seeks an Application Security Analyst to advance its Security Program by integrating AppSec tools into CI/CD pipelines, managing vulnerabilities and partnering with development teams.

This role supports maturing DevSecOps practices across EMCOR’s environments. The position emphasizes reducing the attack surface, strengthening the Information Security Program, and collaborating with IT to tune WAFs, review Terraform IaC for security, and respond to incidents.

Formación

• 3+ years of hands-on experience in an Application Security, Product Security, DevOps or DevSecOps role.
• Experience with cloud platforms (Azure, AWS, GCP, OCI).
• Experience with CI/CD and developer workflow automation such as GitHub Actions, Azure DevOps Pipelines.
• Experience developing or reviewing Terraform used to deploy Azure infrastructure, including reusable modules.
• Experience managing and tuning Web Application Firewall (WAF) policies, specifically for Azure Front Door.
• Experience triaging and remediating vulnerabilities identified by GHAS or Defender for Cloud (CodeQL, Secret Scanning, Dependency Review).
• Proficient in PowerShell for administration and automation.
• Strong communication and project management capabilities.

Responsabilidades

• Support and monitor the enterprise information security system as directed by management.
• Manage daily operations and support for Application Security products, including incident and ticket resolution.
• Provide expertise during incidents, document findings and help improve protocols.
• Maintain and upgrade application security related platforms.
• Tune application security related policies and rulesets.
• Collaborate with business and IT partners to integrate security tools into CI/CD pipelines and workloads.
• Contribute to and perform security reviews of Terraform configurations and reusable modules supporting Infrastructure as Code (IaC).
• Validate Terraform changes for security, compliance and alignment with cloud standards.
• Monitor code platforms and resources for security threats, investigate and respond to security incidents and findings.
• Write SIEM queries and perform analysis of results.
• Respond to security tool findings and collaborate with partners for remediation.
• Implement, configure, manage and support Web Application Firewalls (WAFs) including tuning of rulesets and policies.

Conocimientos

Application Security

DevSecOps

Communication skills

Project management

Team collaboration

Herramientas

GitHub Actions

Azure DevOps Pipelines

Terraform

GHAS

PowerShell

WAF management (Azure Front Door)

Descripción del empleo

About Us

A Fortune 500® company, EMCOR Group, Inc. (NYSE: EME) is a leader in mechanical and electrical construction, industrial and energy infrastructure, and building services. EMCOR companies plan, install, operate, maintain, and protect the sophisticated and dynamic systems that create facility environments - such as electrical, mechanical, lighting, air conditioning, heating, security, fire protection, and power generation systems - in virtually every sector of the economy and for a diverse range of businesses, organizations, and government.

Job Summary

EMCOR Group, Inc. seeks an Application Security Analyst who would support EMCOR’s Security Program with a primary focus of integrating AppSec tools into CI/CD pipelines, managing application security vulnerabilities and partnering with development teams to prioritize security in their practices. This role plays a key part in maturing our DevSecOps culture, reducing EMCOR’s overall attack surface and strengthening the EMCOR Information Security Program.

Essential Duties & Responsibilities

• Support and monitor the enterprise information security system as directed by management.
• Manage daily operations and support for Application Security products, including incident and ticket resolution.
• Provide expertise during incidents, document findings and help improve protocols.
• Maintain and upgrade application security related platforms.
• Tune application security related policies and rulesets.
• Collaborate with business and IT partners to integrate security tools (SAST, DAST, etc.) and platforms into CI/CD pipelines and workloads.
• Contribute to and perform security reviews of Terraform configurations and reusable modules supporting EMCOR’s Infrastructure as Code (IaC).
• Validate Terraform changes for security, compliance and alignment with established cloud architecture standards.
• Monitor code platforms and resources for security threats, investigate and respond to security incidents and findings.
• Write SIEM queries and perform analysis of results.
• Respond to security tool findings and collaborate with business and IT partners for remediation.
• Implement, configure, manage and support Web Application Firewalls (WAFs), including the tuning of rulesets and policies.
• Contribute to various application security related projects and initiatives.
• Perform special projects as needed.

Qualifications

• 3+ years of hands-on experience in an Application Security, Product Security, DevOps or DevSecOps role.
• Experience working in cloud platforms (Azure, AWS, GCP, OCI).
• Experience with CI/CD and developer workflow automation such as GitHub Actions, Azure DevOps Pipelines.
• Experience developing or reviewing Terraform used to deploy Azure infrastructure, including reusable modules.
• Experience managing and tuning Web Application Firewall (WAF) policies, specifically for Azure Front Door.
• Experience triaging and remediating vulnerabilities identified by GitHub Advanced Security (GHAS) or Microsoft Defender for Cloud platforms, including CodeQL, Secret Scanning and Dependency Review.
• Demonstrated proficiency in using PowerShell for administration and automation purposes.
• Proven ability to communicate effectively and interact professionally at all organization levels.
• Strong project management capabilities.
• Ability to consistently deliver an exceptional standard of customer service.

Accountability and Measurement

• Support and maintain EMCOR’s Security Program.

Equal Opportunity Employer

As a leading provider of mechanical and electrical construction, facilities services, and energy infrastructure, we offer employees a competitive salary and benefits package and we are always looking for individuals with the talent and skills required to contribute to our continued growth and success. Equal Opportunity Employer/Veterans/Disabled.

Affirmative Action Policy

Please review ourAffirmative Action Policy (https://emcorgroup.icims.com/icims2/servlet/icims2?module=AppInert&action=download&id=125156&hashed=1811803759) .

Geographic Disclosure

As a leading provider of mechanical and electrical construction, facilities services, and energy infrastructure, we offer employees a competitive salary and benefits package and we are always looking for individuals with the talent and skills required to contribute to our continued growth and success. Equal Opportunity Employer/Veterans/Disabled

Compensation Range

$98,000 - $116,000

Other Compensation

This position is bonus eligible.

Benefits

• We are committed to providing employees a comprehensive benefits package which includes medical, dental, and vision coverage, along with health savings and flexible spending accounts, life insurance, disability, a 401(k) Savings Plan, College Coach and employee assistance program.

Job Locations

US-CT-Norwalk | US-AZ-Phoenix

ID

2026-52381

Company

EMCOR Group, Inc.

Category

Information Technology

Position Type

Full-Time

Location Type

Remote

Posted Date

1 month ago (9/9/2026 6:05 PM)