Hybrid Application Security Analyst - SSDLC & Threat Modeling

CCC Information Services; Chicago (IL); Hybrid; USD 57,000 - 70,000; Full time

Benefits offered by this job

401K Match

Paid time off

Annual Incentive Plan

Comprehensive health insurance

Adoption Assistance

Tuition Reimbursement

Wellness Programs

Stock Purchase Plan

Employee Resource Groups

Job summary

CCC Intelligent Solutions Inc. (CCC) seeks an Application Security Analyst to embed security across the software development lifecycle.

You will collaborate with development, engineering, product, and platform teams to identify, assess, prioritize, and remediate application security risks. This role supports vulnerability management, security testing, secure coding initiatives, and security automation to strengthen the organization’s overall security posture.

Qualifications

• Bachelor's degree or equivalent practical experience in CS/Cybersecurity/IT.
• Knowledge of OWASP Top 10 and secure coding practices.
• Experience with security testing tools: SAST/DAST/SCA and secrets detection platforms.
• Familiarity with APIs, cloud-native applications, and modern development practices.
• Proficiency in scripting languages (Python, PowerShell, JavaScript, Go) and CI/CD workflows.
• Experience with GitHub, GitLab, or Azure DevOps for security automation and monitoring.

Responsibilities

• Perform application security assessments (static, dynamic, software composition analysis) and validate findings.
• Triage findings, prioritize remediation with development teams, and track remediation efforts.
• Support SSDLC initiatives and security-by-design practices across engineering teams.
• Conduct threat modeling and security reviews for new apps and services.
• Develop automation to improve security workflows and reduce manual effort.
• Create security metrics, dashboards, and reporting on application security risk.

Skills

SAST

DAST

SCA

Secrets detection

Python

PowerShell

JavaScript

Go

APIs

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience

Tools

Endor Labs

Wiz

GitHub Advanced Security

Veracode

Checkmarx

Burp Suite

Job description

CCC Intelligent Solutions Inc. (CCC) seeks an Application Security Analyst to embed security across the software development lifecycle.

You will collaborate with development, engineering, product, and platform teams to identify, assess, prioritize, and remediate application security risks. This role supports vulnerability management, security testing, secure coding initiatives, and security automation to strengthen the organization’s overall security posture.