Onsite Chicago App Security Analyst - SSDLC

Cybersecurity Jobs; Chicago (IL); On-site; USD 57,000 - 70,000; Full time

Benefits offered by this job

401K Match

Paid time off

Annual Incentive Plan PerformanceBonus

Comprehensive health insurance

Adoption Assistance

Tuition Reimbursement

Wellness Programs

Stock Purchase Plan options

Employee Resource Groups

Job summary

CCC Intelligent Solutions Inc. is seeking an Application Security Analyst to weave application security into the software development lifecycle.

This onsite role in Chicago, IL involves collaborating with development and engineering teams to identify, assess, prioritize, and remediate security risks, strengthening engineering practices and the organization’s security posture. You will conduct assessments using SAST, DAST, SCA, and manual validation, triage findings, and support secure software

Qualifications

• Bachelor's degree in CS, cybersecurity, IT or equivalent.
• Solid understanding of the OWASP Top 10.
• Experience with security testing tools: SAST, DAST, SCA and secrets detection.
• Knowledge of architectures, APIs, cloud-native apps, and modern dev practices.

Responsibilities

• Conduct application security assessments using SAST, DAST, SCA, and manual validation.
• Review and triage findings; assist dev teams in prioritizing remediation.
• Support SSDLC initiatives and security-by-design practices across engineering.
• Perform threat modeling and security reviews for new apps and services.
• Collaborate with dev teams to identify weaknesses and provide remediation guidance.
• Assist with penetration testing coordination and validate remediations.
• Develop and maintain application security metrics and dashboards.
• Support vulnerability management from identification to remediation verification.
• Create automation and integrations to improve security workflows.
• Evaluate software supply chain risks and secure use of OSS components.
• Help develop security standards and secure coding guidance.
• Deliver security awareness and secure coding training to engineering teams.
• Support incident response activities for application security vulnerabilities.
• Be familiar with AI workflows and support AI enablement.

Skills

Analytical thinking

Troubleshooting

Communication skills

Stakeholder communication

Education

Bachelor's degree in Computer Science, Cybersecurity, IT or equivalent

Tools

SAST

DAST

SCA

Secrets detection platforms

Endor Labs

Wiz

GitHub Advanced Security

Veracode

Checkmarx

Burp Suite

Job description

CCC Intelligent Solutions Inc. is seeking an Application Security Analyst to weave application security into the software development lifecycle.

This onsite role in Chicago, IL involves collaborating with development and engineering teams to identify, assess, prioritize, and remediate security risks, strengthening engineering practices and the organization’s security posture. You will conduct assessments using SAST, DAST, SCA, and manual validation, triage findings, and support secure software