Remote Application Security Analyst — DevSecOps & AI/ML

Jobgether; United States; On-site; USD 75,000 - 95,000; Full time

Benefits offered by this job

100% remote work within the United StA

Medical, dental, and vision insurance

401(k) plan with company match

Professional development and coaching

Wellness and internet reimbursements

Job summary

Jobgether and a partner company seek an Application Security Analyst in the United States. This hands-on role embeds security into the SDLC, from code scanning to runtime protections, working with engineering teams to remediate vulnerabilities and improve secure coding practices.

The candidate will influence API protection, cloud security, and emerging AI/ML security challenges while supporting audits and on-call incident response in a lean team.

Qualifications

• Experience performing application security assessments using SCA, SAST, secrets management and interactive testing tools.
• Ability to triage, prioritize and communicate vulnerabilities based on risk and impact.
• Experience integrating security testing into CI/CD and DevSecOps practices.
• Ability to assess AI/ML security risks and secure APIs and microservices.
• Collaborate with developers to remediate vulnerabilities and promote secure coding.

Responsibilities

• Embed security throughout the software development lifecycle.
• Conduct threat modeling and secure design reviews for apps, APIs, and cloud solutions.
• Drive remediation with engineering teams and reinforce secure coding practices.
• Automate security tasks and participate in incident response and audits.
• Contribute to PCI, HIPAA, HITRUST readiness where applicable.

Skills

SCA

SAST

secrets management

interactive application testing tools

DevSecOps

CI/CD integration

risk-based prioritization

threat modeling

Tools

WAF

EDR

MDM

cloud platforms

Job description

Jobgether and a partner company seek an Application Security Analyst in the United States. This hands-on role embeds security into the SDLC, from code scanning to runtime protections, working with engineering teams to remediate vulnerabilities and improve secure coding practices.

The candidate will influence API protection, cloud security, and emerging AI/ML security challenges while supporting audits and on-call incident response in a lean team.