Sr Global Cybersecurity Analyst

Socket.dev; Westfield (IN); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

401(k) with company match

Generous vacation time & paid holidays

Volunteer Time Off

Paid parental leave

Tuition and Health Club reimbursement

Long-term and short-term disability, 1

Life insurance and optional other life

HSA with company contribution

FSA

Job summary

GDM Seeds is seeking a Sr. Global Cybersecurity Analyst to lead application security and vulnerability management across the organization from its U.S. operations.

You will be the primary contact for security assessment of applications, SaaS platforms, and third‑party software, driving remediation of vulnerabilities across the environment. The role administers and supports vulnerability management tooling, conducts secure code and configuration reviews, and supports secure SDLC practices for

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity or related field.
• Five or more years of progressive cybersecurity experience with application security and vulnerability management.
• CompTIA Security+ or equivalent cybersecurity certification required.
• Application security or cloud security certifications preferred (CSSLP, GWAPT, OSCP, MS security).
• Must have a valid driver’s license and meet MVR guidelines.

Responsibilities

• Lead the application security review and intake process for new and updated applications and third‑party software.
• Own the vulnerability management lifecycle across endpoints, servers, cloud workloads, and apps.
• Perform application security assessments including secure code review and dependency analysis.
• Partner with teams to define remediation timelines and manage risk acceptances.
• Administer vulnerability management tooling (Microsoft Defender, Rapid7 InsightVM).
• Maintain application inventory and produce metrics on vulnerability exposure and remediation performance.
• Support secure SDLC practices, including threat modeling and security sign‑off before production.
• Conduct security reviews of AI/ML tools, including data handling and subprocessor risk.

Skills

Project planning

Analytical thinking

Prioritization

Independent work

Communication skills

App security assessment

Vulnerability lifecycle

Threat modeling

Secure coding

OWASP guidance

Security tooling

CI/CD & Cloud

AI security

Vendor risk

Business language translation

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

Microsoft Defender

Rapid7 InsightVM

Job description

WHO WE ARE

GDM Seeds is a global leader in plant genetics, dedicated to transforming agriculture through technological innovation. With a continuous focus on research and development, we bring the most advanced and high‑performing seed varieties to the market, creating new growth opportunities for our partners and for the future of agribusiness.

Our North America portfolio includes leading brands like AgriGold®, DONMARIO®, Mustang™, PRIDE® Seeds, Revere®, and Virtue, supported by a network of research superstations, one of the largest corn genetic pools and the fourth‑largest corn research program. Through our combined expertise, we continue to push the boundaries of innovation, delivering top-tier seed solutions to help farmers grow and succeed. GDM’s region‑first brand model reinforces the company’s long‑standing promise to deliver top‑performing genetics and robust agronomic support - ensuring farmers have the right genetics, in the right place, at the right time.

OUR DNA

We are passionate about what we do and driven by curiosity. We believe that learning and innovation are the foundation for transforming the future of agriculture. Our focus is on cutting‑edge genetic development, creating solutions that make a difference in the field and in the global market.

Our DNA not only guides us but also connects us: we work with empathy, transparency, and respect, ensuring agile and flexible operations. Here, you are the protagonist of your career, because we believe every individual plays an essential role in building something greater.

If you are passionate about learning and want to be part of evolving agriculture, GDM is the right place for you!

We are proud to offer a competitive benefits package, which includes:

• Medical, dental, and vision coverage
• 401(k) with company match (eligible 1st of the month following date of hire)
• Generous vacation time & paid holidays
• Volunteer Time Off
• Paid parental leave
• Tuition and Health Club reimbursement
• Other benefits:Company paid Long-term and short-term disability insurance, company paid life insurance and optional supplemental life insurance, health savings account (HSA) with a company contribution and Flexible Spending Account (FSA)

GDM is an equal opportunity employer. We are proud to welcome candidates from all backgrounds and encourage you to apply.

Learn more about us at gdmseeds.com or follow us on LinkedIn and Twitter @GDMSeeds.

Job Summary

The Sr. Global Cybersecurity Analyst is responsible for leading application security and vulnerability management across the organization. The role serves as the primary point of contact for security assessment of applications, SaaS platforms, and third‑party software, and is responsible for identifying, prioritizing, and driving remediation of vulnerabilities across the environment.

This position administers and supports vulnerability management and application security tooling, performs secure code and secure configuration review, and supports secure software development practices for internally developed and vendor‑supplied applications. The role also contributes to the security review of artificial intelligence (AI) tools and features adopted by the business. The role provides security support, contributes to security awareness initiatives, maintains security controls and documentation, and supports the ongoing operation and improvement of the organization’s cybersecurity program.

Duties/Responsibilities

• Lead the application security review and intake process for new and updated applications, SaaS platforms, and third‑party software, including data classification, architecture and integration review, access model review, and vendor security posture evaluation.
• Own the vulnerability management lifecycle across endpoints, servers, cloud workloads, and applications, including discovery, validation, risk‑based prioritization, remediation tracking, and reporting.
• Perform application security assessment activities, including secure code review, software composition and dependency analysis, secure configuration review, and web application vulnerability scanning.
• Partner with development, infrastructure, and business application teams to define remediation timelines, drive findings to closure, and manage documented exceptions and risk acceptances.
• Administer and maintain vulnerability management and application security tooling, including Microsoft Defender and Rapid7 InsightVM.
• Maintain the application inventory and produce metrics and reporting on vulnerability exposure, remediation performance, and application risk for technology and business leadership.
• Support secure software development lifecycle (SDLC) practices, including security requirements definition, threat modeling, and security sign‑off prior to production deployment.
• Conduct security reviews of AI and machine learning tools and features, including data handling, subprocessor and data residency considerations, and alignment with the organization’s AI use standards.
• Manage security support requests and provide technical assistance to employees regarding security‑related issues.
• Maintain security procedures, standards, system documentation, and operational runbooks.
• Participate in security awareness and training initiatives.
• Support cybersecurity projects, compliance activities, audits, and other security program initiatives.
• Perform other duties as assigned.

Required Skills/Abilities

• Effective planning and priority setting. Ability to manage several complex projects simultaneously while working under pressure to meet deadlines.
• Strong analytical, problem‑solving, and troubleshooting skills.
• Ability to manage multiple priorities and projects while meeting deadlines in a fast‑paced environment.
• Ability to work independently and collaboratively with cross‑functional teams.
• Strong verbal and written communication skills.
• Application security assessment, including secure code review, threat modeling, and secure architecture and configuration review.
• Vulnerability management lifecycle, including scanning, risk‑based prioritization using CVSS, EPSS, and known exploited vulnerability data, remediation tracking, and exception management.
• Application security standards and frameworks, including the OWASP Top 10, OWASP ASVS, CIS Benchmarks, and NIST secure development guidance.
• Vulnerability management and application security tooling, such as Microsoft Defender, Rapid7 InsightVM, or comparable platforms.
• Software development and deployment practices, including source control, CI/CD pipelines, APIs, containers, and cloud‑hosted and SaaS applications.
• AI and machine learning security concepts, including model and data handling risk, prompt injection, and third‑party AI service and subprocessor risk.
• Third‑party and SaaS security assessment, including data classification, data privacy considerations, and vendor security posture evaluation.
• Ability to translate technical vulnerability and application security findings into clear business‑language recommendations for technical and non‑technical audiences.

Education and Experience

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity or related field
• Five (5) or more years of progressive cybersecurity experience, with demonstrated experience in application security, vulnerability management, and third‑party software or SaaS security assessment.
• CompTIA Security+ certification or equivalent cybersecurity certification required.
• Application security, cloud security, or offensive security certifications preferred (for example, CSSLP, GWAPT, OSCP, or Microsoft security certifications).
• Must have valid driver’s license and meet MVR guidelines.

Physical Requirements

• Prolonged periods of sitting at a desk and working on a computer.
• Frequent use of standard office equipment, including a computer, keyboard, and telephone.
• Must be able to communicate effectively in person and virtually.
• Must be able to occasionally lift and carry up to 15 pounds.
• Ability to travel occasionally, if required.