Remote Application Security Analyst | DevSecOps & Cloud

Sound Physicians; Nashville (TN); Hybrid; USD 75,000 - 110,000; Full time

Benefits offered by this job

Medical insurance

401(k) with company match

PTO 15 days per year

Ten company-paid holidays

Job summary

Sound Physicians seeks an Application Security Analyst to embed security into the software delivery lifecycle and partner with development, platform, cloud, and security teams to enable secure-by-default processes.

The role focuses on reducing risk through automation, ongoing testing, secure configurations and practical guidance to ship software quickly and safely. Security principles, cloud controls, and DevSecOps experience are essential.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• 4+ years of experience in application security, DevOps, cloud security, or related role.
• Experience in regulated environments such as healthcare or financial services is a plus.

Responsibilities

• Integrate security controls into CI/CD pipelines (SAST, DAST, SCA, secret scanning).
• Identify and remediate application, API, container, and cloud security risks early in development.
• Perform security assessments, architecture reviews, and threat modeling for new/existing apps.
• Support vulnerability management and remediation tracking with risk-based SLAs.
• Conduct secure code reviews and guide teams on OWASP Top 10 and industry standards.

Skills

Application security concepts

Secure coding practices

Cloud security

CI/CD security

OWASP Top 10

Python

Education

Bachelor's degree in CS or related

Tools

Veracode

Checkmarx

Snyk

Docker

Kubernetes

Job description

Sound Physicians seeks an Application Security Analyst to embed security into the software delivery lifecycle and partner with development, platform, cloud, and security teams to enable secure-by-default processes.

The role focuses on reducing risk through automation, ongoing testing, secure configurations and practical guidance to ship software quickly and safely. Security principles, cloud controls, and DevSecOps experience are essential.