Senior Application Security Analyst

ASM Research, An Accenture Federal Services Company; Providence (RI); On-site; USD 85,000 - 95,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, is seeking a Security Analyst to embed application security across the software development life cycle for enterprise and mission-critical systems. You will collaborate with software engineering, DevOps, and client stakeholders to translate security requirements into practical design and remediation activities.

You will perform security architecture reviews, threat modeling, vulnerability assessments, and risk analyses; guide owners through

Qualifications

• Bachelor’s degree in CS, Engineering, or another technical discipline.
• Typically 5–10 years of progressively responsible experience in application security or related cybersecurity discipline.
• Experience applying secure SDLC practices including threat modeling and security acceptance criteria.
• Experience assessing web apps, APIs, cloud workloads for vulnerabilities and misconfigurations.
• Ability to interpret and communicate findings from application-security testing and remediation.
• U.S. citizenship is required with ability to obtain a Public Trust background investigation.

Responsibilities

• Integrate application security requirements across planning, development, testing, deployment, and maintenance phases of the SDLC.
• Conduct security architecture reviews, threat modeling, secure design reviews, and vulnerability assessments for web apps, APIs, cloud workloads, and supporting infrastructure.
• Analyze findings from SAST, DAST, SCA, dependency scanning, secrets scanning, container scanning, and pen testing to determine risk and remediation priority.
• Partner with development, DevOps, architecture, and operations teams to identify security risks and provide mitigation recommendations.
• Perform or support secure code reviews and assess apps for authentication/authorization weaknesses and insecure configurations.
• Track vulnerabilities and corrective actions through remediation, validate closure, and retesting.
• Develop and maintain security procedures, standards, assessment reports, and risk communications.
• Evaluate application-security products and developer-facing tools for coverage and CI/CD compatibility.

Skills

Threat modeling

Secure SDLC

Vulnerability management

CI/CD security

Education

Bachelor's degree in CS/Engineering or equivalent

Job description

ASM Research, An Accenture Federal Services Company, is seeking a Security Analyst to embed application security across the software development life cycle for enterprise and mission-critical systems. You will collaborate with software engineering, DevOps, and client stakeholders to translate security requirements into practical design and remediation activities.

You will perform security architecture reviews, threat modeling, vulnerability assessments, and risk analyses; guide owners through