Application Security Analyst — SDLC & Risk Mitigation

ASM Research, An Accenture Federal Services Company; Charleston (WV); On-site; USD 85,000 - 95,000; Full time

Job summary

ASM Research is seeking a Security Analyst to integrate application-security practices across the full software development life cycle for enterprise and mission-critical systems. You will partner with engineering, DevOps, and stakeholders to translate security requirements into actionable design, development, testing, deployment, and remediation activities.

You will conduct security architecture design reviews, threat modeling, and vulnerability assessments, guiding owners through prioritized

Qualifications

• Bachelor’s degree in Computer Science, Engineering, or related technical discipline.
• Typically 5–10 years of progressive application-security experience.
• Experience applying secure SDLC practices and threat modeling.
• Experience assessing web apps, APIs, services, and cloud workloads for vulnerabilities.
• Ability to interpret findings from security testing and communicate risks.
• U.S. citizenship with ability to obtain Public Trust.
• Professional security certs such as CSSLP, CISSP, or Security+ are a plus.

Responsibilities

• Integrate security requirements across planning, development, testing, deployment, and maintenance.
• Conduct security reviews, threat modeling, and vulnerability assessments for web apps and cloud workloads.
• Analyze findings from scanning tools to determine risk and remediation priority.
• Partner with development, DevOps, architecture, and operations to mitigate risks.
• Perform secure code reviews and assess auth, config, and secrets exposure weaknesses.
• Track vulnerabilities, verify remediation, and retest as needed.
• Develop security procedures, standards, and risk communications for stakeholders.
• Evaluate security products and CI/CD tooling for integration feasibility.

Skills

Threat modeling

Secure SDLC practices

Vulnerability analysis

Security testing

Communication of findings

Education

Bachelor’s degree in Computer Science / Engineering

Tools

SAST tools

DAST tools

SCA tools

CI/CD security tooling

Container scanning

Job description

ASM Research is seeking a Security Analyst to integrate application-security practices across the full software development life cycle for enterprise and mission-critical systems. You will partner with engineering, DevOps, and stakeholders to translate security requirements into actionable design, development, testing, deployment, and remediation activities.

You will conduct security architecture design reviews, threat modeling, and vulnerability assessments, guiding owners through prioritized