> Markdown version of [/jobs/ext/1397372-associate-security-analyst-application-security-contractual-itdsggr](https://www.wearedevelopers.com/jobs/ext/1397372-associate-security-analyst-application-security-contractual-itdsggr). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Associate Security Analyst (Application Security) Contractual -ITDSGGR - **Company:** International Monetary Fund - **Location:** Washington, DC, United States - **Contract:** Permanent contract - **Skills:** Java (Programming Language), .NET Framework, Artificial Intelligence, Software System Penetration Testing, Microsoft Azure, Software as a Service, Static Program Analysis, Cyber Security, Computer Programming, Dynamic Program Analysis, Information Systems Security Architecture Professional, Python (Programming Language), Open Web Application Security, Systems Development Life Cycle, Power BI, Secure Coding, Software Engineering, Software Vulnerability Management, Web Applications, Scripting, Enterprise Software Applications, Software Security, Software Application Programming, Information Technology, Servicenow, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing - **Published:** July 23, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=9a2de48174783649 ## About the Role * Educational development, typically acquired by the completion of an advanced university degree, or equivalent, in Computer Science, Cybersecurity, or a related field; or a university degree, or equivalent, supplemented by a minimum of six (6) years of relevant professional experience; * Experience in Vulnerability Management, Application Security, Secure Development or related cybersecurity disciplines. * Familiarity with security frameworks and standards such as OWASP Top 10, NIST and secure development practices. * Experience with one or more programming or scripting languages (e.g., Java, Python, .NET) * Understanding of secure architecture principles for web-based and cloud-based applications. * Exposure to security testing methodologies and tools, including static analysis, dynamic analysis, vulnerability scanning, and penetration testing. * Experience supporting cross-functional initiatives involving multiple stakeholders, technical teams, and business partners. * Strong communication, project coordination, organizational, analytical, and collaboration skills, with the ability to manage multiple priorities and track deliverables effectively. Preferred Qualifications * Certifications, such SSCP, Security+, or working toward CISSP or similar. * Experience with ServiceNow, Azure DevOps, and Microsoft Azure cloud technologies. * Experience using Power BI and AI-enabled tools to support reporting, analytics, and operational efficiency. This is a one-year contractual appointment. Contractual appointments at the IMF are renewable for up to four years of cumulative contractual service, pending incumbent's performance, budget availability, and continuous business need. ## Description The Associate Security Analyst (Application Security) supports the integration of security throughout the Software Development Lifecycle (SDLC) by collaborating with development, infrastructure, and application teams to support vulnerability remediation efforts, application security initiatives, and secure development practices. The successful candidate combines foundational application security knowledge with strong coordination, communication, and stakeholder engagement skills to help maintain the security posture of enterprise applications while supporting continuous process improvement., Application Security & Secure SDLC * Collaborate with technical teams to promote secure coding practices and support the implementation of Secure SDLC standards, including security requirements for application design and development. * Assist in integrating application security tools, such as SAST, DAST, and SCA into CI/CD pipelines, and participate in threat modeling and security design reviews under the guidance of senior engineers. Vulnerability Management & Security Controls * Review security testing results and support remediation efforts for identified vulnerabilities. * Help implement security controls for applications deployed in both on-premises and cloud environments. * Assist in tracking vulnerability remediation activities and supporting the timely closure of identified findings in collaboration with application and engineering teams. Security Awareness & Continuous Improvement * Support training efforts and knowledge sharing on secure development practices within engineering teams. * Stay current with emerging security threats, vulnerabilities, and industry best practices to provide application security guidance to technical teams. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Beyond Dashboards: Fixing Text-to-SQL with Semantic RAG](https://www.wearedevelopers.com/videos/2036-beyond-dashboards-fixing-text-to-sql-with-semantic-rag) - [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm) - [AI in Production: applied AI & enterprise use cases](https://www.wearedevelopers.com/videos/100130-ai-in-production-applied-ai-enterprise-use-cases) ## Related Articles - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)