Senior Cloud AppSec Analyst - Vulnerability & Cloud Security

PowerPlan, Inc.; Atlanta (GA); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health insurance

401(k) or equivalent

Job summary

PowerPlan seeks a Senior Security Analyst / AppSec Specialist to strengthen our application security posture in a hands-on, high-impact role within Information Security & Compliance. You will partner with DevOps, product, and compliance teams to advance vulnerability management maturity across our cloud-hosted SaaS environment.

Responsibilities include implementing a centralized vulnerability management platform, coordinating annual penetration testing, and driving NIST CSF 2.0 maturity with

Qualifications

• Hands-on AppSec experience in a SaaS environment.
• Experience with vulnerability management life cycle and tooling.
• Strong knowledge of security controls and threat modeling.
• Experience coordinating penetration tests and managing findings.
• Excellent cross-functional communication and documentation.
• Familiarity with SOC 2, ISO 27001 and NIST CSF 2.0.

Responsibilities

• Implement a centralized application vulnerability management platform within 120 days.
• Lead annual application and cloud penetration testing program.
• Establish standardized security architecture review processes.
• Drive measurable maturity improvements aligned to NIST CSF 2.0.
• Strengthen cross-functional security collaboration across Dev, CloudOps, IT & compliance.

Skills

AppSec expertise

SAST/DAST/SCA

Pen-testing coordination

Vulnerability management

CrowdStrike

Qualys

Rapid7

Cloud security (AWS/Azure)

Threat modeling

Architecture reviews

SOC 2 / ISO 27001 / NIST CSF 2.0

Security communication

Education

Bachelor’s degree or higher in CS/InfoSec or related field

Tools

DefectDojo

Job description

PowerPlan seeks a Senior Security Analyst / AppSec Specialist to strengthen our application security posture in a hands-on, high-impact role within Information Security & Compliance. You will partner with DevOps, product, and compliance teams to advance vulnerability management maturity across our cloud-hosted SaaS environment.

Responsibilities include implementing a centralized vulnerability management platform, coordinating annual penetration testing, and driving NIST CSF 2.0 maturity with