Senior Application Security Analyst

DGS Office of External Affairs; Olympia (WA); On-site; USD 120,000 - 180,000; Full time

Job summary

The DGS Office of External Affairs seeks a Senior Application Security Analyst to protect Washington Health Benefit Exchange applications and data by embedding security controls across the software development lifecycle in cloud and on-premises environments.

You will collaborate with delivery teams, DevOps, architects, and IT to advance secure software development practices, perform security assessments, and drive continuous improvement of the application's security posture.

Qualifications

• Seven years of information security experience in specialized roles such as security architecture, penetration testing, or application security
• Demonstrated knowledge of secure SDLC, secure architecture design, and cloud architecture including DevSecOps practices
• Experience performing application security code reviews and risk assessments using automated and manual techniques
• Experience with common vulnerability assessment tools such as Nessus, Rapid7, Burp Suite, SAST, DAST, and SCA tools
• Strong analytical and problem-solving skills with experience integrating security in CI/CD pipelines and infrastructure-as-code
• Strong interpersonal and collaboration skills working with cross-functional teams and external partners

Responsibilities

• Vulnerability management
• Threat modeling
• Code reviews
• Penetration testing
• Provide guidance to development teams on remediation and secure coding standards

Skills

Security architecture

Penetration testing

Application security

CI/CD security

DevSecOps

Threat modeling

Vulnerability assessment

Cross-functional collaboration

Tools

Nessus

Rapid7

Burp Suite

SAST

DAST

SCA tools

Job description

The Senior Application Security Analyst protects the Washington Health Benefit Exchange's data and applications by integrating security controls throughout the software development lifecycle across cloud and on-premises environments. Operating under the Application Security Lead, this senior technical role collaborates with delivery teams, DevOps, architects, and IT to implement secure software development practices, conduct security assessments, and drive continuous improvement of application security posture.

Responsibilities

• Vulnerability management
• Threat modeling
• Code reviews
• Penetration testing
• Provide guidance to development teams on remediation and secure coding standards

Qualifications

• Seven years of information security experience in specialized roles such as security architecture, penetration testing, or application security
• Demonstrated knowledge of secure SDLC, secure architecture design, and cloud architecture including DevSecOps practices
• Experience performing application security code reviews and risk assessments using automated and manual techniques
• Experience with common vulnerability assessment tools such as Nessus, Rapid7, Burp Suite, SAST, DAST, and SCA tools
• Strong analytical and problem-solving skills with experience integrating security in CI/CD pipelines and infrastructure-as-code
• Strong interpersonal and collaboration skills working with cross-functional teams and external partners