Senior Application Security Strategist

Cybersecurity Jobs; Madison (WI); Hybrid; USD 135,000 - 165,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Telehealth services

401(k) with match

Paid time off

Professional development

Job summary

Cybersecurity Jobs in Wisconsin seeks a Principal Application Security Analyst to design and run the enterprise application security program across the software development lifecycle, reducing risk through testing, triage, and developer enablement.

The role sits within the Cyber Threat Management team and collaborates with Cyber Trust & Architecture to translate security standards into practical testing criteria and actionable guidance for engineers.

Qualifications

• U.S. Citizenship required due to DoD restrictions.
• Bachelor’s degree or equivalent in cybersecurity/CS/IT.
• 5+ years of progressive experience in application security or related.
• Hands-on experience with SAST and DAST testing.
• Knowledge of OWASP Top 10 and MITRE ATT&CK.

Responsibilities

• Build and operate the enterprise Application Security program across the SDLC.
• Engage developers to support secure coding and triage findings.
• Translate security standards into practical testing criteria.
• Coordinate remediation of vulnerabilities with developers and owners.
• Provide risk-based reporting to technical, managerial, and executive audiences.
• Collaborate with Cyber Trust & Architecture on standards interpretation.

Skills

5+ years in application security

Strong communication skills

Problem solving

Education

Bachelor’s degree in Cybersecurity, Computer Science, Software Engineering, IT, Information Systems, or related field

Tools

SAST

DAST

SCA

API security testing tools

Job description

Cybersecurity Jobs in Wisconsin seeks a Principal Application Security Analyst to design and run the enterprise application security program across the software development lifecycle, reducing risk through testing, triage, and developer enablement.

The role sits within the Cyber Threat Management team and collaborates with Cyber Trust & Architecture to translate security standards into practical testing criteria and actionable guidance for engineers.