On-Site App Security Analyst & WAF Lead

Stellantis; Auburn Hills (MI); On-site; USD 110,000 - 140,000; Full time

Job summary

Stellantis is seeking an experienced Application Security professional to identify, analyze, and mitigate vulnerabilities across the SDLC. This role supports a Shift Left cybersecurity strategy, reinforcing secure development through DevSecOps practices.

You will work on SAST/DAST/IAST testing, vulnerability remediation, and WAF deployment in a on-site Auburn Hills HQ environment. Strong collaboration across teams is essential to success.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• 3+ years of hands-on experience in application security, security testing, and DevSecOps.

Responsibilities

• Perform security testing: SAST, DAST, IAST, mobile security, and dynamic testing.
• Analyze vulnerabilities and recommend secure coding fixes.
• Demonstrate vulnerabilities to development teams and drive remediation.
• Lead Web Application Firewall (WAF) deployment and implement security controls.
• Collaborate with development, platform, and supplier teams; train and develop remediation guidance.
• Assess and report risks, milestones, deliverables, and status updates.

Skills

Application security

Secure coding practices

DevSecOps

SAST/DAST/IAST

Education

Bachelor's degree in CS/IT

Tools

Jenkins

GitLab

GitHub Actions

TeamCity

Checkmarx

Burp Suite

AWS WAF

Azure Front Door

Job description

Stellantis is seeking an experienced Application Security professional to identify, analyze, and mitigate vulnerabilities across the SDLC. This role supports a Shift Left cybersecurity strategy, reinforcing secure development through DevSecOps practices.

You will work on SAST/DAST/IAST testing, vulnerability remediation, and WAF deployment in a on-site Auburn Hills HQ environment. Strong collaboration across teams is essential to success.