Application Security Analyst: Secure SDLC & Automation

CCC Intelligent Solutions; Chicago (IL); On-site; USD 57,000 - 70,000; Full time

Benefits offered by this job

Bonus/Commission eligible

Job summary

CCC Intelligent Solutions in the United States is seeking an Application Security Analyst to help embed security across the software development lifecycle. You will partner with engineering, product, and platform teams to identify and remediate security risks, conduct threat modeling, and drive secure coding practices.

The role emphasizes collaboration, automation, and measurable improvements in security posture.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.
• Understanding of OWASP Top 10 and web app vulnerabilities.
• Experience with SAST/DAST/SCA and secrets detection platforms.
• Knowledge of APIs, cloud-native apps, and modern dev practices.
• Scripting skills (Python/PowerShell/JavaScript/Go).
• Experience with GitHub, GitLab, or Azure DevOps.
• Strong analytical and communication skills.

Responsibilities

• Perform application security assessments (static, dynamic, SCA) and validate findings.
• Triage findings and help teams prioritize remediation.
• Support SSDLC initiatives and security-by-design practices.
• Conduct threat modeling and security reviews for new apps and services.
• Provide remediation guidance to development teams.
• Coordinate penetration testing and validate fixes.
• Develop security metrics and dashboards.
• Assist with vulnerability management processes and tracking.
• Create automation to improve security workflows.
• Evaluate software supply chain risks and open-source usage.
• Develop security standards and training for engineers.
• Support incident response for application security issues.
• Stay current with AI workflow considerations.

Skills

Application security

Threat modeling

Vulnerability assessment

Security testing

Communication with stakeholders

Analytical thinking

Education

Bachelor's degree in Computer Science or related field

Tools

SAST tools

DAST tools

SCA tools

Burp Suite

Veracode

Checkmarx

GitHub Advanced Security

Job description

CCC Intelligent Solutions in the United States is seeking an Application Security Analyst to help embed security across the software development lifecycle. You will partner with engineering, product, and platform teams to identify and remediate security risks, conduct threat modeling, and drive secure coding practices.

The role emphasizes collaboration, automation, and measurable improvements in security posture.