Senior Application Security Analyst

ASM Research, An Accenture Federal Services Company; Raleigh (NC); On-site; USD 85,000 - 95,000; Full time

Job summary

ASM Research seeks a Security Analyst to integrate application security across the software development life cycle for enterprise systems. You will partner with software engineering, DevOps, and client stakeholders to translate security requirements into practical design, development, testing, deployment, and remediation activities.

The role conducts security architecture reviews, threat modeling, vulnerability assessments, and guides owners through mitigation. A U.S.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, or another technical discipline, or equivalent relevant experience.
• Typically 5–10 years of progressively responsible experience in application security, secure software engineering, vulnerability management, or a closely related cybersecurity discipline.
• Demonstrated experience applying secure SDLC practices, including security requirements definition, threat modeling, architecture review, secure design patterns, and security acceptance criteria.
• Experience assessing web applications, APIs, services, cloud-hosted workloads, and supporting infrastructure for vulnerabilities, insecure configurations, identity and access control weaknesses, and software security risks.
• Ability to interpret, prioritize, and communicate findings from application-security testing, vulnerability scanning, dependency analysis, secrets scanning, container scanning, and penetration testing.
• Strong working knowledge of vulnerability triage, risk scoring, exploitability analysis, compensating controls, remediation tracking, and validation of corrective actions.
• U.S. citizenship is required, with the ability to obtain and maintain a Public Trust background investigation.

Responsibilities

• Integrate application security requirements, secure design practices, and security acceptance criteria across planning, development, testing, deployment, and maintenance phases of the software development life cycle.
• Conduct and support security architecture reviews, threat modeling, secure design reviews, and vulnerability assessments for web applications, APIs, cloud-hosted workloads, services, and supporting infrastructure.
• Analyze findings from static application security testing, dynamic application security testing, software composition analysis, dependency scanning, secrets scanning, container scanning, and penetration testing to determine risk and remediation priority.
• Partner with development, DevOps, architecture, and operations teams to identify security risks, explain vulnerabilities, and provide practical, actionable mitigation recommendations.
• Perform or support secure code reviews and assess applications for authentication and authorization weaknesses, insecure configurations, secrets exposure, common software weaknesses, and other security control gaps.
• Track vulnerabilities and corrective actions through remediation, validate evidence of closure, and perform retesting as needed to confirm risk reduction.
• Develop and maintain security procedures, technical standards, assessment reports, and risk communications that support informed authorization, remediation, and stakeholder decisions.
• Evaluate application-security products and developer-facing tools for coverage, integration feasibility, operational impact, reporting quality, and compatibility with source-control and CI/CD workflows.

Education

Bachelor’s degree in Computer Science, Engineering, or another technical discipline, or equivalent relevant experience

Job description

ASM Research seeks a Security Analyst to integrate application security across the software development life cycle for enterprise systems. You will partner with software engineering, DevOps, and client stakeholders to translate security requirements into practical design, development, testing, deployment, and remediation activities.

The role conducts security architecture reviews, threat modeling, vulnerability assessments, and guides owners through mitigation. A U.S.