AWS AppSec Analyst — Hybrid Role in FinServ

System One; Lafayette (LA); On-site; USD 110,000 - 150,000; Full time

Job summary

System One is seeking an experienced AWS Application Security Analyst to join our team in a hybrid role supporting a large financial services environment. The role partners with software development, cloud, DevOps, and cybersecurity teams to identify, assess, and remediate security risks across the SDLC.

You will perform manual and automated reviews, conduct threat modeling, and help embed secure coding, DevSecOps practices, and AWS security into CI/CD pipelines.

Qualifications

• 5+ years of application security experience and secure SDLC knowledge.
• Hands-on with SAST, DAST, and SCA tools.
• Experience performing manual code reviews and security assessments.
• Strong threat modeling and risk assessment skills.
• Experience with AWS security and cloud deployments.
• DevSecOps experience and CI/CD integration.
• Familiarity with GitHub/Jenkins or similar CI/CD platforms.
• Understanding of container security and related risks.
• Proficiency in Java, Python, JavaScript, or C#.

Responsibilities

• Perform manual and automated application and source-code security reviews to identify vulnerabilities and security risks.
• Conduct threat modeling and application security risk assessments for new and existing applications.
• Work with development teams to determine appropriate remediation approaches for security findings.
• Utilize SAST, DAST, and SCA tools for application security testing.
• Integrate application security controls and automated security testing into CI/CD pipelines.
• Evaluate application security risks across AWS cloud and containerized environments.
• Apply knowledge of secure coding practices, network protocols, encryption, authentication, and common application vulnerabilities.
• Partner with development, DevOps, cloud, and cybersecurity teams to strengthen DevSecOps practices throughout the SDLC.
• Develop security guidance, FAQs, standards, and reusable application security best practices for development teams.
• Clearly communicate vulnerabilities, security risks, and remediation recommendations to technical stakeholders.

Skills

Application security

Threat modeling

Secure coding practices

Communication skills

Education

Bachelor's degree in Computer Science or related

Tools

SAST tools

DAST tools

SCA tools

CI/CD tools

GitHub/Jenkins

Container security tools

Job description

System One is seeking an experienced AWS Application Security Analyst to join our team in a hybrid role supporting a large financial services environment. The role partners with software development, cloud, DevOps, and cybersecurity teams to identify, assess, and remediate security risks across the SDLC.

You will perform manual and automated reviews, conduct threat modeling, and help embed secure coding, DevSecOps practices, and AWS security into CI/CD pipelines.