Application Security & DevSecOps Analyst

Barclays; Colorado; On-site; USD 125,000 - 170,000; Full time

Job summary

Barclays in Whippany, NJ seeks an Application Security Analyst to enhance security across SDLC and DevSecOps. The role focuses on SAST, SCA, DAST, API security, and AI-assisted testing, translating findings into actionable remediation guidance for engineering and security teams.

You will evaluate risk, support governance requirements, and embed security controls throughout development workflows, ensuring regulatory compliance and robust defenses.

Qualifications

• Experience running and triaging security scans (SAST/SCA/DAST) and validating findings.
• Understanding APIs security, authentication, authorization, input validation, data exposure and business logic.

Responsibilities

• Run and triage security scans (SAST/SCA/DAST) and validate findings.
• Test APIs and identify weaknesses in authentication, authorization, input validation, data exposure, and business logic.
• Apply secure coding knowledge in at least one development ecosystem and support security testing within CI/CD and cloud-native workflows.
• Evaluate security data to identify trends, prioritize risk, and produce operational metrics.

Skills

Java/Spring

.NET

Go

Python

JavaScript/TypeScript

Tools

SAST

SCA

DAST

Job description

Barclays in Whippany, NJ seeks an Application Security Analyst to enhance security across SDLC and DevSecOps. The role focuses on SAST, SCA, DAST, API security, and AI-assisted testing, translating findings into actionable remediation guidance for engineering and security teams.

You will evaluate risk, support governance requirements, and embed security controls throughout development workflows, ensuring regulatory compliance and robust defenses.