Senior Application Security Analyst

ASM Research, An Accenture Federal Services Company; Montgomery (AL); On-site; USD 85,000 - 95,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, seeks a Security Analyst to integrate application security across the software development life cycle for enterprise and mission-critical systems. You will collaborate with software engineering, DevOps, and client stakeholders to translate security requirements into practical design, development, testing, deployment, and remediation activities.

The role involves conducting security architecture and design reviews, vulnerability assessments,

Qualifications

• Bachelor’s degree in CS/Engineering or equivalent experience.
• 5–10 years in application security or related cybersecurity discipline.
• Experience applying secure SDLC practices, including security requirements definition, threat modeling, architecture review, secure design patterns, and security acceptance criteria.
• Experience assessing web applications, APIs, services, cloud-hosted workloads, and supporting infrastructure for vulnerabilities, insecure configurations, identity and access control weaknesses, and software security risks.
• Ability to interpret, prioritize, and communicate findings from application-security testing, vulnerability scanning, dependency analysis, secrets scanning, container scanning, and penetration testing.
• Strong working knowledge of vulnerability triage, risk scoring, exploitability analysis, compensating controls, remediation tracking, and validation of corrective actions.
• U.S. citizenship is required, with the ability to obtain and maintain a Public Trust background investigation.

Responsibilities

• Integrate application security requirements, secure design practices, and security acceptance criteria across planning, development, testing, deployment, and maintenance phases of the software development life cycle.
• Conduct and support security architecture reviews, threat modeling, secure design reviews, and vulnerability assessments for web applications, APIs, cloud-hosted workloads, services, and supporting infrastructure.
• Analyze findings from static and dynamic application security testing, software composition analysis, dependency scanning, secrets scanning, container scanning, and penetration testing to determine risk and remediation priority.
• Partner with development, DevOps, architecture, and operations teams to identify security risks, explain vulnerabilities, and provide practical mitigation recommendations.
• Perform or support secure code reviews and assess applications for authentication and authorization weaknesses, insecure configurations, secrets exposure, and other security control gaps.
• Track vulnerabilities and corrective actions through remediation, validate evidence of closure, and perform retesting as needed to confirm risk reduction.
• Develop and maintain security procedures, technical standards, assessment reports, and risk communications that support informed authorization, remediation, and stakeholder decisions.
• Evaluate application-security products and developer-facing tools for coverage, integration feasibility, operational impact, reporting quality, and compatibility with source-control and CI/CD workflows.

Skills

Secure SDLC practices

Threat modeling

Vulnerability management

Secure design reviews

Security testing & analysis

Risk analysis & remediation tracking

U.S. citizenship

Education

Bachelor’s degree in CS/Engineering

Job description

ASM Research, An Accenture Federal Services Company, seeks a Security Analyst to integrate application security across the software development life cycle for enterprise and mission-critical systems. You will collaborate with software engineering, DevOps, and client stakeholders to translate security requirements into practical design, development, testing, deployment, and remediation activities.

The role involves conducting security architecture and design reviews, vulnerability assessments,