AWS Application Security Analyst: SDLC & DevSecOps Champion

System One; Birmingham (AL); Hybrid; USD 110,000 - 145,000; Full time

Benefits offered by this job

Health/dental/vision benefits

401(k) plan

Life insurance

Job summary

System One is seeking an AWS Application Security Analyst in Birmingham, AL (hybrid) to support security efforts across the SDLC. You will partner with software development, cloud, DevOps, and cybersecurity teams to identify and remediate risks.

The ideal candidate has hands-on experience with SAST/DAST/SCA, threat modeling, secure code review, DevSecOps, and CI/CD security in AWS and containerized environments.

Qualifications

• Minimum 5+ years in application security and secure software development.
• Hands-on with SAST, DAST, and SCA; performs code reviews and risk assessments.
• Experience integrating security testing into CI/CD pipelines.
• Knowledge of AWS security, container security and DevSecOps practices.

Responsibilities

• Perform manual and automated reviews to identify vulnerabilities in applications and source code.
• Conduct threat modeling and risk assessments for new and existing apps.
• Advise development teams on remediation approaches for findings.
• Utilize SAST, DAST, and SCA tools for security testing.
• Integrate security controls into CI/CD pipelines and AWS/cloud environments.
• Communicate risks and remediation recommendations to technical stakeholders.

Skills

Application security

Threat modeling

Secure coding practices

DevSecOps

CI/CD security

Security testing

Communication skills

Education

Bachelor's degree in CS/IS/Cybersecurity

Tools

SAST tooling

DAST tooling

SCA tooling

GitHub

Jenkins

Job description

System One is seeking an AWS Application Security Analyst in Birmingham, AL (hybrid) to support security efforts across the SDLC. You will partner with software development, cloud, DevOps, and cybersecurity teams to identify and remediate risks.

The ideal candidate has hands-on experience with SAST/DAST/SCA, threat modeling, secure code review, DevSecOps, and CI/CD security in AWS and containerized environments.