Senior AppSec Strategist — Secure SDLC & Risk (Hybrid)

Wis Phys Svc Ins Corp; Madison (WI); Hybrid; USD 135,000 - 165,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Telehealth from Day 1

401(k) with match

Job summary

WPS in Madison, Wisconsin, seeks a Principal Applications Security Analyst to lead the enterprise application-security program, reduce risk, and operationalize secure-development standards. You’ll work with developers to translate standards into practical guidance and testing criteria, managing testing and reporting to executives.

This senior individual-contributor role requires deep technical depth, independence, and the ability to influence risk decisions across teams and the SDLC.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Software Engineering, Information Technology, Information Systems, or related field or equivalent experience.
• 5+ years of progressive experience in application security, software security, DevSecOps, or related security discipline.
• Experience with application-security testing technologies (SAST/DAST) and translating standards into developer guidance.

Responsibilities

• Operate and improve enterprise application-security testing capabilities (SAST, DAST, SCA, API, secrets scanning).
• Translate security standards into practical developer guidance and testing criteria across the SDLC.
• Lead day-to-day application-security testing, triage, and developer engagement.
• Collaborate with Cyber Trust & Architecture and leadership on program priorities and standards interpretation.

Skills

SAST

DAST

CI/CD pipelines

Threat modeling

Education

Bachelor’s degree in Cybersecurity/CS/Engineering

Tools

SAST tools

DAST tools

CI/CD tooling

Job description

WPS in Madison, Wisconsin, seeks a Principal Applications Security Analyst to lead the enterprise application-security program, reduce risk, and operationalize secure-development standards. You’ll work with developers to translate standards into practical guidance and testing criteria, managing testing and reporting to executives.

This senior individual-contributor role requires deep technical depth, independence, and the ability to influence risk decisions across teams and the SDLC.