Application Security Analyst - DevSecOps & WAF Champion

Stellantis; Auburn (AL); On-site; USD 90,000 - 120,000; Full time

Job summary

Stellantis is looking for a dedicated Application Security Engineer based in Auburn, Alabama, to identify, analyze, and mitigate security vulnerabilities throughout the software development lifecycle (SDLC). This role encompasses various aspects including performing security testing, collaborating with development teams, and implementing security standards.

Candidates should have a minimum of 3 years of hands-on experience in application security along with a bachelor’s degree in a relevant field. Knowledge of DevSecOps practices and security frameworks like NIST is essential.

Qualifications

• 3+ years of hands-on experience in application security, security testing, and DevSecOps.
• Strong understanding of application architectures, web and mobile development.
• Experience with secure code review in Java, C#, Python.
• Knowledge of security frameworks like NIST and ISO 27001.

Responsibilities

• Identify and mitigate application security vulnerabilities throughout the SDLC.
• Perform security testing and analyze vulnerabilities.
• Integrate security controls into development workflows.
• Collaborate with development and platform teams.

Skills

Application security

DevSecOps

Security testing tools (SAST, DAST)

Communication skills

Analytical skills

Education

Bachelor’s degree in Computer Science, Information Technology, or related field

Tools

Jenkins

GitLab

GitHub Actions

Checkmarx

Burp Suite

Akamai

Cloudflare

Job description

Stellantis is looking for a dedicated Application Security Engineer based in Auburn, Alabama, to identify, analyze, and mitigate security vulnerabilities throughout the software development lifecycle (SDLC). This role encompasses various aspects including performing security testing, collaborating with development teams, and implementing security standards.

Candidates should have a minimum of 3 years of hands-on experience in application security along with a bachelor’s degree in a relevant field. Knowledge of DevSecOps practices and security frameworks like NIST is essential.