Application Security Analyst

JobCubby; Plano, Northern (TX, KY); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Toyota Financial Services (TFS) Technology team seeks an Application Security Analyst to protect software applications, web services, and APIs. You will work with developers to identify vulnerabilities and embed security controls early in the SDLC.

You will lead security testing, review code for vulnerabilities, and provide remediation guidance and dashboards to inform leadership. This role emphasizes collaboration in a fast-paced environment.

Qualifications

• Typically 3–6 years of experience in application security with hands-on SAST/DAST/SCA tooling.
• Experience testing complex web apps, APIs, and mobile apps for security vulnerabilities.
• Strong knowledge of OWASP Top Ten, CWE Top 25 and secure coding practices.
• Familiarity with Java, Python, Bash, PHP, Javascript and related web/mobile tech.
• Solid understanding of CI/CD security with Jenkins, GitHub Actions and related tooling.
• Experience with containers and cloud security (Docker, Kubernetes, AWS/Azure/GCP).
• Knowledge of IaC tools such as Terraform and Ansible.

Responsibilities

• Shift left security by collaborating with developers to embed secure practices in SDLC.
• Integrate SAST/DAST/SCA tools into development workflows and pipelines.
• Review code to identify vulnerabilities and guide developers on remediation.
• Prepare vulnerability reports and dashboards for leadership, prioritizing risk by impact.
• Stay current on threats and provide training on interpreting security reports.
• Lead security testing initiatives and mentor junior security engineers.

Skills

Application security

Vulnerability assessment

Secure coding

Threat modeling

Security testing

Tools

SAST

DAST

SCA

Jenkins

Harness

GitHub Actions

Docker

Kubernetes

Terraform

Ansible

Job description

Overview

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us.

An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in‑class customer experience in an innovative, collaborative environment.

Toyota does not offer support or sponsorship of job applicants for employment-‑based visas or any other work authorization for this role now or in the future. You must have the right to work in the United States and not require Toyota support or sponsorship for immigration-‑related employment (e.g., H-1B, O-1, E-3, H-1B1, TN, F-1 OPT, F-1 STEM OPT, F-1 CPT, ‘job flexibility benefits’ [also known as I-140 or Adjustment of Status portability], etc.) now or in the future. You should not apply for this role if you will require Toyota to assist with immigration support or sponsorship now or in the future.

Who we’re looking for

Toyota Financial Services (TFS) Technology team is looking for a highly motivated person to fill a role as a Application Security Analyst.

Your responsibilities will be to ensure the security of company software applications, web services, and APIs.

You will work closely with development teams to identify vulnerabilities, suggest remediation efforts, and integrate security controls into the DevOps pipeline.

The role involves ensuring the security and integrity of our products and third-party software, providing guidance on security risks.

What you’ll be doing

• Collaborate with developers to "shift left"—integrating security early in the software development life cycle (SDLC)
• Integrate security tools like SAST, DAST, and SCA into development processes.
• Review code for security vulnerabilities and provide guidance to developers on remediation and secure coding practices.
• Prepare detailed vulnerability reports and dashboards for leadership, prioritizing risks based on business impact.
• Stay updated on emerging threats and vulnerabilities relevant to application security.
• Provide guidance and training on interpreting reports and strategies for remediation.

What you bring

• Typically, 3-6 years of experience in application security, with significant hands-on experience using SAST/SCA/DAST tools and methodologies.
• Proven expertise in testing complex web applications, APIs, and mobile applications for security vulnerabilities.
• Strong understanding of application security standards (e.g., OWASP Top Ten, SANS CWE Top 25).
• Familiarity with programming languages and frameworks commonly used in web and mobile applications, including Java, Python, Bash/Shell Scripting, PHP, Javascript, etc.
• Strong understanding of CI/CD tools (e.g., Jenkins, Harness, GHA).
• Familiarity with containerization and orchestration (Docker, Kubernetes).
• Knowledge of cloud platforms (AWS, Azure, GCP) and their security features.
• Knowledge of Infrastructure as Code (Terraform, Ansible).

Added bonus if you have

• Strong analytical and problem-solving skills.
• Excellent communication and collaboration abilities.
• Ability to work in a fast-paced, agile environment.
• Ability to lead security testing initiatives and mentor junior security engineers.

What we’ll bring

During your interview process, our team can fill you in on all the details of our industry-leading benefits and career development opportunities. A few highlights include:

• A work environment built on teamwork, flexibility, and respect
• Professional growth and development programs to help advance your career, as well as tuition reimbursement
• Team Member Vehicle Purchase Discount
• Toyota Team Member Lease Vehicle Program (if applicable)
• Comprehensive health care and wellness plans for your entire family
• Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute (if applicable)
• Paid holidays and paid time off
• Referral services related to prenatal services, adoption, childcare, schools and more
• Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)
• Relocation assistance (if applicable)

Belonging at Toyota

Our success begins and ends with our people. We embrace all perspectives and value unique human experiences. Respect for all is our North Star.

Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law.