Application Security Analyst - Shift Left & Secure DevOps

JobCubby; Plano, Northern (TX, KY); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Toyota Financial Services (TFS) Technology team seeks an Application Security Analyst to protect software applications, web services, and APIs. You will work with developers to identify vulnerabilities and embed security controls early in the SDLC.

You will lead security testing, review code for vulnerabilities, and provide remediation guidance and dashboards to inform leadership. This role emphasizes collaboration in a fast-paced environment.

Qualifications

• Typically 3–6 years of experience in application security with hands-on SAST/DAST/SCA tooling.
• Experience testing complex web apps, APIs, and mobile apps for security vulnerabilities.
• Strong knowledge of OWASP Top Ten, CWE Top 25 and secure coding practices.
• Familiarity with Java, Python, Bash, PHP, Javascript and related web/mobile tech.
• Solid understanding of CI/CD security with Jenkins, GitHub Actions and related tooling.
• Experience with containers and cloud security (Docker, Kubernetes, AWS/Azure/GCP).
• Knowledge of IaC tools such as Terraform and Ansible.

Responsibilities

• Shift left security by collaborating with developers to embed secure practices in SDLC.
• Integrate SAST/DAST/SCA tools into development workflows and pipelines.
• Review code to identify vulnerabilities and guide developers on remediation.
• Prepare vulnerability reports and dashboards for leadership, prioritizing risk by impact.
• Stay current on threats and provide training on interpreting security reports.
• Lead security testing initiatives and mentor junior security engineers.

Skills

Application security

Vulnerability assessment

Secure coding

Threat modeling

Security testing

Tools

SAST

DAST

SCA

Jenkins

Harness

GitHub Actions

Docker

Kubernetes

Terraform

Ansible

Job description

Toyota Financial Services (TFS) Technology team seeks an Application Security Analyst to protect software applications, web services, and APIs. You will work with developers to identify vulnerabilities and embed security controls early in the SDLC.

You will lead security testing, review code for vulnerabilities, and provide remediation guidance and dashboards to inform leadership. This role emphasizes collaboration in a fast-paced environment.