Senior Application Security Lead — Hybrid

WPS—A health solutions company; Madison (WI); Hybrid; USD 135,000 - 165,000; Full time

Benefits offered by this job

Remote and hybrid work options

Performance bonus

401(k) match

Health insurance

Dental insurance

Professional development

Job summary

WPS, a health solutions company in Madison, Wisconsin, seeks a Principal Application Security Analyst to build and operate the enterprise application-security program, reduce risk, and guide developers in secure coding throughout the SDLC.

This senior individual-contributor role involves hands-on testing (SAST/DAST/SCA), interpreting findings, reporting to executives, and partnering with Cyber Trust & Architecture to translate standards into practical guidance and testing criteria.

Qualifications

• Bachelor’s degree or equivalent in a related field.
• 5+ years in application security or DevSecOps.
• Hands-on with SAST/DAST and translating standards into guidance.

Responsibilities

• Operate enterprise application-security testing (SAST/DAST/SCA) and triage findings.
• Translate security standards into practical developer guidance and testing criteria.
• Engage with developers to implement secure coding practices and education.
• Prepare reports on vulnerabilities, trends, and risk levels for technical, managerial, and executive audiences.

Skills

Application security

DevSecOps

SAST/DAST

CI/CD pipelines

Threat modeling

Communication skills

Risk communication

Education

Bachelor’s degree in Cybersecurity/CS/IT or related field

Tools

SAST tools

DAST tools

API testing tools

Job description

WPS, a health solutions company in Madison, Wisconsin, seeks a Principal Application Security Analyst to build and operate the enterprise application-security program, reduce risk, and guide developers in secure coding throughout the SDLC.

This senior individual-contributor role involves hands-on testing (SAST/DAST/SCA), interpreting findings, reporting to executives, and partnering with Cyber Trust & Architecture to translate standards into practical guidance and testing criteria.