IT Security Analyst II (AppSec)

Western Governors University; Salt Lake City (UT); On-site; USD 108,000 - 162,000; Full time

Benefits offered by this job

Bonuses

Medical, Dental, Vision

Telehealth

Wellbeing program

Tuition discounts

Flexible PTO

11 paid holidays

Parental leave

Job summary

Western Governors University seeks an Application Security Engineer to strengthen security across applications and systems. You will review code, guide remediation, and shape security policies throughout the software lifecycle.

You will build and maintain security tooling, perform threat modeling, and collaborate with engineering to reduce vulnerabilities while educating teams on secure coding practices.

Qualifications

• Bachelor’s degree or equivalent experience.
• 3+ years of information security experience.
• Proficiency in Python, Java, JavaScript, Go, or C/C++.
• Knowledge of OWASP Top 10 and secure architecture principles.
• Experience with SDLC and secure coding practices.
• Familiarity with CLI and open-source security tools.

Responsibilities

• Analyze source code to identify security flaws (injection, auth issues).
• Oversee vulnerability scanning of applications and APIs.
• Perform threat modeling during system design.
• Conduct architecture reviews and create security documentation.
• Build and maintain SAST/DAST/IAST tools in CI/CD pipelines.
• Educate developers on secure coding practices.

Skills

Python

Java

JavaScript

Go

C/C++

OWASP Top 10

SDLC

CLI

Education

Bachelor’s degree or equivalent experience

Tools

Kali

Nessus

Burp

NMap

Metasploit

Wireshark

Job description

If you’re passionate about building a better future for individuals, communities, and our country—and you’re committed to working hard to play your part in building that future—consider WGU as the next step in your career.Driven by a mission to expand access to higher education through online, competency-based degree programs, WGU is also committed to being a great place to work for a diverse workforce of student-focused professionals. The university has pioneered a new way to learn in the 21st century, one that has received praise from academic, industry, government, and media leaders. Whatever your role, working for WGU gives you a part to play in helping students graduate, creating a better tomorrow for themselves and their families.The salary range for this position takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs.At WGU, it is not typical for an individual to be hired at or near the top of the range for their position, and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is:Grade: Technical 407Pay Range: $108,200.00 - $162,400.00Job DescriptionAbout the TeamYou’ll collaborate on security-focused tools and services while helping shape security documentation and standards. As an Application Security Engineer, you will play a critical role in strengthening WGU’s security posture by reviewing access requests, guiding vulnerability remediation, and contributing to security policies and standards. Your expertise will help ensure our applications and systems remain secure, resilient, and aligned with best practices. You will safeguard systems and applications by identifying, analyzing, and mitigating security vulnerabilities throughout the full software development lifecycle (SDLC).What You’ll DoAnalyze source code to identify security flaws such as injection flaws and broken authentication.Oversee vulnerability scanning of applications and APIs.Perform threat modeling to identify potential attack vectors and security weaknesses during system designPerform architecture reviews and create security documentation for new projectsBuild, configure, and maintain application security tools (SAST, DAST, IAST, SCA) and integrate them into CI/CD pipelinesCollaborate with engineering teams to prioritize and fix security vulnerabilities.Educate developers on secure coding practices and emerging threats.Assess user access to software-related systems to ensure least-privilege access and provide appropriate risk mitigation.Contribute to the development and improvement of security policies, standards, and procedures.Identify gaps and help develop standards, guidelines, and procedures to strengthen WGU’s security framework.What You’ll BringBachelor’s degree in a related field or equivalent experience.3+ years of information security experience.Meaningful Experience in software development, including proficiency in languages such as Python, Java, JavaScript, Go, C/C++, etc.Security Knowledge: Knowledge of OWASP Top 10, web application security, API security, and secure architecture principles.Strong Understanding of SDLC processesComfort with CLI and experience using open-source security tools (e.g., Kali, Nessus, Burp, NMap, Metasploit, Wireshark).Good written and verbal communication skills, with the ability to simplify technical details for executive non-technical audiences.Bonus Points if You HaveSecurity certifications such as CISSP, CSSLP, OSCP, CEH, or similar.Experience with cloud infrastructure security.Familiarity with tools like Burp Suite, Snyk, Checkmarx, or similar SAST/DAST tools.Experience in Lieu of EducationEquivalent relevant experience may substitute for educational requirements at the hiring manager’s discretion.What to ExpectAt WGU, our mission drives everything we do, including how we hire. Our interview experience is designed to give qualified candidates the opportunity to show their best work through meaningful conversations, practical problem-solving, and authentic collaboration.We thoughtfully review every application and invite forward the candidates whose experience and potential best align with the role and our mission. If selected, you will hear from a recruiter or hiring manager who will guide you through the process. We aim to communicate decisions promptly and respectfully.Here is what that typically looks like:Introductory call/Recruiter screenTechnical assessment with the teamHiring Leader interviewWork LocationThis is a full-time, 5 days in-office position at WGU’s office in Salt Lake City, Utah.Visa SponsorshipWhile we welcome applicants from all backgrounds, WGU is not able to provide visa sponsorship for this role.#LI-AW2Position & Application DetailsFull-Time Regular Positions (classified as regular and working 40 standard weekly hours): This is a full-time, regular position (classified for 40 standard weekly hours) that is eligible for bonuses; medical, dental, vision, telehealth and mental healthcare; health savings account and flexible spending account; basic and voluntary life insurance; disability coverage; accident, critical illness and hospital indemnity supplemental coverages; legal and identity theft coverage; retirement savings plan; wellbeing program; discounted WGU tuition; and flexible paid time off for rest and relaxation with no need for accrual, flexible paid sick time with no need for accrual, 11 paid holidays, and other paid leaves, including up to 12 weeks of parental leave.How to Apply: If interested, an application will need to be submitted online. Internal WGU employees will need to apply through the internal job board in Workday.Additional InformationDisclaimer: The job posting highlights the most critical responsibilities and requirements of the job. It’s not all-inclusive.Accommodations: Applicants with disabilities who require assistance or accommodation during the application or interview process should contact our Talent Acquisition team at [e-mail] Employment Opportunity: All qualified applicants will receive consideration for employment without regard to any protected characteristic as required by law.