> Markdown version of [/jobs/ext/1405925-associate-security-analyst-application-security-contractual-itdsggr](https://www.wearedevelopers.com/jobs/ext/1405925-associate-security-analyst-application-security-contractual-itdsggr). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Associate Security Analyst (Application Security) Contractual -ITDSGGR - **Company:** International Monetary Fund - **Location:** Alexandria, VA, United States - **Salary:** $52,000.0 - $94,000.0 - **Contract:** Permanent contract - **Skills:** Java (Programming Language), .NET Framework, Artificial Intelligence, Software System Penetration Testing, Microsoft Azure, Software as a Service, Static Program Analysis, Cyber Security, Computer Programming, Dynamic Program Analysis, Information Systems Security Architecture Professional, Python (Programming Language), Open Web Application Security, Systems Development Life Cycle, Power BI, Secure Coding, Software Engineering, Software Vulnerability Management, Web Applications, Scripting, Enterprise Software Applications, Software Security, Software Application Programming, Information Technology, Servicenow, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing - **Published:** July 23, 2026 - **Apply:** https://www.careerjet.com/job/useab8917eca4c07c28e36102606629b6b/eaa ## About the Role * Educational development, typically acquired by the completion of an advanced university degree, or equivalent, in Computer Science, Cybersecurity, or a related field; or a university degree, or equivalent, supplemented by a minimum of six (6) years of relevant professional experience; * Experience in Vulnerability Management, Application Security, Secure Development or related cybersecurity disciplines. * Familiarity with security frameworks and standards such as OWASP Top 10, NIST and secure development practices. * Experience with one or more programming or scripting languages (e.g., Java, Python, .NET) * Understanding of secure architecture principles for web-based and cloud-based applications. * Exposure to security testing methodologies and tools, including static analysis, dynamic analysis, vulnerability scanning, and penetration testing. * Experience supporting cross-functional initiatives involving multiple stakeholders, technical teams, and business partners. * Strong communication, project coordination, organizational, analytical, and collaboration skills, with the ability to manage multiple priorities and track deliverables effectively. Preferred Qualifications * Certifications, such SSCP, Security+, or working toward CISSP or similar. * Experience with ServiceNow, Azure DevOps, and Microsoft Azure cloud technologies. * Experience using Power BI and AI-enabled tools to support reporting, analytics, and operational efficiency. ## Description The Associate Security Analyst (Application Security) supports the integration of security throughout the Software Development Lifecycle (SDLC) by collaborating with development, infrastructure, and application teams to support vulnerability remediation efforts, application security initiatives, and secure development practices. The successful candidate combines foundational application security knowledge with strong coordination, communication, and stakeholder engagement skills to help maintain the security posture of enterprise applications while supporting continuous process improvement. Major Duties and Responsibilities Application Security & Secure SDLC * Collaborate with technical teams to promote secure coding practices and support the implementation of Secure SDLC standards, including security requirements for application design and development. * Assist in integrating application security tools, such as SAST, DAST, and SCA into CI/CD pipelines, and participate in threat modeling and security design reviews under the guidance of senior engineers. Vulnerability Management & Security Controls * Review security testing results and support remediation efforts for identified vulnerabilities. * Help implement security controls for applications deployed in both on-premises and cloud environments. * Assist in tracking vulnerability remediation activities and supporting the timely closure of identified findings in collaboration with application and engineering teams. Security Awareness & Continuous Improvement * Support training efforts and knowledge sharing on secure development practices within engineering teams. * Stay current with emerging security threats, vulnerabilities, and industry best practices to provide application security guidance to technical teams., This is a one-year contractual appointment. Contractual appointments at the IMF are renewable for up to four years of cumulative contractual service, pending incumbent's performance, budget availability, and continuous business need. Department: ITDPVPM Information Technology Department Project and Vendor Management Project Portfolio Management Section Hiring For: A09, A10 The IMF is guided by the principle that the employment, classification, promotion, and assignment of staff shall be made without discrimination against any person. We welcome requests for reasonable accommodations for disabilities during the selection process. Information on how to request accommodations will be provided during the application process. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [REST, GraphQL, gRPC, and more: A comparison of modern API styles](https://www.wearedevelopers.com/videos/100247-rest-graphql-grpc-and-more-a-comparison-of-modern-api-styles) - [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm) - [AI in Production: applied AI & enterprise use cases](https://www.wearedevelopers.com/videos/100130-ai-in-production-applied-ai-enterprise-use-cases) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)