Application Security & DevSecOps Analyst

Barclays; Hanover Township (IL); On-site; USD 125,000 - 170,000; Full time

Job summary

Barclays in Whippany, NJ, is seeking an Application Security Analyst to drive security across the software development lifecycle. You will lead testing across SAST, SCA, DAST, API security and AI-assisted security testing, evaluate findings, and guide remediation with engineering teams.

You will embed security controls, support cyber governance, and work with stakeholders to strengthen the bank's security posture.

Qualifications

• Experience with SAST/DAST/ SCA including triage of findings and remediation.
• Experience testing APIs and identifying weaknesses in auth, input validation, data exposure, and business logic.
• Knowledge of secure coding across development ecosystems (Java/Spring, .NET, Go, Python, JS/TS).
• Ability to analyze data, build metrics and dashboards to monitor remediation progress.
• Understanding of cyber governance, controls, and risk reporting.

Responsibilities

• Develop and execute assessments, audits, and threat models to identify vulnerabilities.
• Communicate key findings and remediation guidance to stakeholders.
• Collaborate with IT teams to refine penetration testing methodologies.
• Maintain comprehensive reports for senior stakeholders on test results.
• Identify emerging vulnerabilities and develop testing approaches.

Skills

SAST/SCA/DAST

API security

DevSecOps

CI/CD security

Secure coding

Tools

Java/Spring

DotNet

Go

Python

Job description

Barclays in Whippany, NJ, is seeking an Application Security Analyst to drive security across the software development lifecycle. You will lead testing across SAST, SCA, DAST, API security and AI-assisted security testing, evaluate findings, and guide remediation with engineering teams.

You will embed security controls, support cyber governance, and work with stakeholders to strengthen the bank's security posture.