Remote Application Security Analyst - CI/CD & AI Security

Fsastorecom; United States; On-site; USD 75,000 - 95,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401K with company match

Paid parental & bonding leave

Flexible PTO

Monthly internet reimbursement

Professional development support

Mental health resources

Job summary

Health-E Commerce is seeking an Application Security Analyst to embed security into development pipelines, secure code, and support audits such as PCI, HIPAA, and HITRUST. You will work with engineering to implement testing and runtime protections, and ensure AI/ML components are resilient against threats.

The role is hands-on, requires collaboration across teams, and involves securing APIs, managing security tooling, and contributing to an on-call rotation.

Qualifications

• Hands-on security testing of software and codebases.

Responsibilities

• Perform application security assessments using SCA, SAST, Secrets management, and interactive testing tools
• Identify, triage, and prioritize vulnerabilities
• Integrate security testing into CI/CD pipelines (DevSecOps)
• Assess security risks in AI/ML-enabled applications, including model exposure and inference endpoints
• Secure AI APIs, plugins, and third-party integrations
• Tune security controls across technologies such as WAF, EDR, MDM, and cloud
• Conduct threat modeling and secure design reviews for applications and AI use cases
• Assess and harden identity and access flows ensuring least privilege
• Automate repetitive security tasks so the team can focus on higher-value work
• Partner with developers to remediate vulnerabilities and improve secure coding practices
• Monitor and respond to security incidents as part of an on-call rotation

Skills

SCA/SAST

OWASP Top 10

APIs & microservices

CI/CD pipelines

AI/ML basics

Cloud security

Python/Bash scripting

Communication

Least privilege

Tools

WAF

EDR

MDM

Job description

Health-E Commerce is seeking an Application Security Analyst to embed security into development pipelines, secure code, and support audits such as PCI, HIPAA, and HITRUST. You will work with engineering to implement testing and runtime protections, and ensure AI/ML components are resilient against threats.

The role is hands-on, requires collaboration across teams, and involves securing APIs, managing security tooling, and contributing to an on-call rotation.