Senior InfoSec Analyst - Hybrid App Security & Automation

RLI Insurance Company; Tempe (AZ); Hybrid; USD 96,000 - 138,000; Full time

Benefits offered by this job

Flexible & hybrid work arrangements

Comprehensive benefits

Job summary

RLI Insurance Company is seeking a Senior Information Security Analyst to strengthen security operations, drive application vulnerability management, and automate recurring tasks. The role blends hands-on security work with collaboration across development teams to improve remediations and risk posture.

The position emphasizes vulnerability management, incident response fundamentals, and the use of scripting to reduce repetitive tasks while ensuring robust security controls and regulatory

Qualifications

• Typically requires a Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field preferred.
• Typically requires 5+ years of relevant information security experience or an equivalent combination of education and experience.
• Demonstrated experience in vulnerability management or application security, along with hands‑on security operations or incident response experience.
• Experience working with software development teams. Experience using scripting, APIs, or other automation to improve security workflows.
• Relevant certifications such as CISSP, GIAC, CSSLP, OSCP, Microsoft security certifications, or equivalent are preferred.

Responsibilities

• Lead application-focused vulnerability management and help technology teams move findings from identification through validated remediation.
• Translate penetration test, application security, dependency, and vulnerability findings into clear, developer-actionable remediation guidance.
• Prioritize vulnerabilities using severity, exploitability, application criticality, data sensitivity, exposure, and business risk.
• Build reusable remediation patterns, templates, examples, and technical guidance for recurring application vulnerabilities.
• Analyze vulnerability trends to identify recurring root causes.
• Partner with development leadership and product teams to improve remediation expectations, time-to-fix, and fix-rate outcomes.
• Validate remediation and support documented risk acceptance when remediation is not feasible within required timelines.
• Support penetration testing, security assessments, and technical risk assessments.

Skills

Vulnerability management

Application security

Incident response

Automation

Scripting / automation

Education

Bachelor's degree in Computer Science / Cybersecurity / Information Systems

Tools

GitLab

GitHub

Azure DevOps

Job description

RLI Insurance Company is seeking a Senior Information Security Analyst to strengthen security operations, drive application vulnerability management, and automate recurring tasks. The role blends hands-on security work with collaboration across development teams to improve remediations and risk posture.

The position emphasizes vulnerability management, incident response fundamentals, and the use of scripting to reduce repetitive tasks while ensuring robust security controls and regulatory