Senior Application Security Analyst – SDLC & Threat Modeling

ASM Research, An Accenture Federal Services Company; Sacramento (CA); On-site; USD 85,000 - 95,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, seeks a Security Analyst to integrate application security across the SDLC for enterprise and mission-critical systems. You will partner with software engineering, architecture, DevOps, operations, and client stakeholders to translate security requirements into practical design, development, testing, deployment, and remediation activities.

The role conducts security architecture reviews, vulnerability assessments, and risk analyses; interprets

Qualifications

• Bachelor’s degree or equivalent experience in a technical discipline.
• 5–10 years of progressive application-security experience.
• Experience applying secure SDLC practices and threat modeling.
• Experience assessing web apps, APIs, cloud workloads, and supporting infra for vulnerabilities.
• Ability to interpret findings from security testing and remediation efforts.
• Strong knowledge of vulnerability triage, risk scoring, and remediation tracking.
• U.S. citizenship with ability to obtain a Public Trust clearance.

Responsibilities

• Integrate security requirements across planning, development, testing, deployment, and maintenance phases of the SDLC.
• Conduct security architecture reviews, threat modeling, secure design reviews, and vulnerability assessments for web apps, APIs, cloud workloads, and infrastructure.
• Analyze findings from SAST, DAST, SCA, secrets, container scanning, and pen testing to prioritize remediation.
• Partner with development, DevOps, architecture, and operations teams to identify risks and provide actionable mitigation.
• Perform or support secure code reviews; assess authentication/authorization weaknesses and insecure configurations.
• Track vulnerabilities and remediation actions; validate closure and retest as needed.
• Develop and maintain security procedures, standards, and risk communications to support authorization decisions.
• Evaluate security products and developer tools for coverage, integration feasibility, and CI/CD compatibility.

Skills

Application Security

Threat Modeling

Vulnerability Assessments

Secure SDLC

CI/CD Security

Security Testing

Education

Bachelor’s degree in Computer Science or Engineering

Job description

ASM Research, An Accenture Federal Services Company, seeks a Security Analyst to integrate application security across the SDLC for enterprise and mission-critical systems. You will partner with software engineering, architecture, DevOps, operations, and client stakeholders to translate security requirements into practical design, development, testing, deployment, and remediation activities.

The role conducts security architecture reviews, vulnerability assessments, and risk analyses; interprets