Application Security Strategist — SDLC Risk & Assurance

ASM Research, An Accenture Federal Services Company; Boston (MA); On-site; USD 85,000 - 95,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, seeks a Security Analyst to weave application security into the software development lifecycle for enterprise and mission-critical systems. You will work with software engineering, architecture, DevOps, operations, and stakeholders to translate security requirements into practical design, development, testing, deployment, and remediation.

The role emphasizes security reviews, threat modeling, vulnerability management, and secure-development

Qualifications

• Bachelor’s degree in CS, engineering, or equivalent experience.
• Typically 5–10 years in application security or related cybersecurity.
• Experience applying secure SDLC practices including threat modeling and architecture reviews.
• Experience assessing vulnerabilities in web apps, APIs, cloud workloads, and infrastructure.
• Ability to interpret and communicate findings from security testing and vulnerability scans.
• Strong vulnerability triage, risk scoring, and remediation tracking.
• U.S. citizenship with ability to obtain a Public Trust background.

Responsibilities

• Integrate application security requirements across planning, development, testing, deployment, and maintenance of SDLC.
• Conduct security architecture reviews, threat modeling, secure design reviews, and vulnerability assessments.
• Analyze findings from SAST, DAST, SCA, dependencies, secrets, container scans, and pen tests.
• Partner with DevOps, architecture, and operations to mitigate risks with actionable steps.
• Perform secure code reviews and assess for auth weaknesses and misconfigurations.
• Track vulnerabilities and remediation actions through closure and retesting.
• Develop security procedures, standards, and risk communications for informed decisions.
• Evaluate security tools for CI/CD integration and coverage.

Skills

Threat modeling

Secure SDLC

Architecture review

Security testing

Vulnerability assessment

Communication findings

CI/CD security

Cloud security

Education

Bachelor's degree in CS/engineering or equivalent

5–10 years in application security or related field

Tools

SAST

DAST

SCA

Dependency scanning

Secrets scanning

Container scanning

Penetration testing

Job description

ASM Research, An Accenture Federal Services Company, seeks a Security Analyst to weave application security into the software development lifecycle for enterprise and mission-critical systems. You will work with software engineering, architecture, DevOps, operations, and stakeholders to translate security requirements into practical design, development, testing, deployment, and remediation.

The role emphasizes security reviews, threat modeling, vulnerability management, and secure-development