> Markdown version of [/jobs/ext/2695628-security-analyst](https://www.wearedevelopers.com/jobs/ext/2695628-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Analyst - **Company:** CareerCircle - **Location:** Tampa, FL, United States (Remote available) - **Salary:** $108,160.0 - $120,640.0 - **Contract:** Temporary to permanent - **Skills:** Microsoft Windows, Artificial Intelligence, Microsoft Azure, Continuous Integration, DevOps, HP Thin Clients, Internet Control Message Protocol, Python (Programming Language), Network Security, Open Web Application Security, Software Engineering, Software Vulnerability Management, Scripting, Software Security, Network Server, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing - **Published:** September 3, 2026 - **Apply:** https://www.careercircle.com/jobs/all/all/usa/fl/tampa/93ec17ee-7fb3-440e-b1fc-5e3d50c57288 ## About the Role * We are seeking an application security engineer in a 100% remote role. Experienced candidates will have extensive SAST and DAST experience, securing CI/CD pipeline * 3-5+ years of recent focused Application security experience which should involve a deep understanding of OWASP * Experience discovering vulnerabilities in applications and code where they need to determine if it is a true vulnerability then working with the software engineers to fix the vulnerability. Must have experience with static and dynamic code scanning. Uses Rapid 7 for DAST and Check Marks for their SAST but other DAST or SAST tools are ok. * At least one year of enterprise experience with setting up code scanning in Azure Dev Ops as our client has implemented code scanning in their CI/CD pipeline * Should have strong network security experience and should understand things like port numbers, What is icmp, what port SSH run on? etc. * 2 years of python experience as this resource will develop Python scripts to streamline vulnerability assessments and automate reporting processes, reducing analysis time, Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors. ## Description Rapid7 Research Hardening Operations Management Mitigation Coordinating Azure DevOps Prioritization Network Security Business Valuation Reporting Processes Software Engineering Application Security System Administration Full Stack Development Vulnerability Scanning Artificial Intelligence Business Transformation Vulnerability Management Vulnerability Assessments Python (Programming Language) Internet Control Message Protocol (ICMP) Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST), This position will be accountable for the identification, prioritization, creation, tracking and coordination of various remediation plans for vulnerabilities from network based and application-based assessments. Remediation plan must be made actionable for patch team and application owners to carry out remediation. This position will be the liaison between the vulnerability management team and various IT teams and must be able to provide technical remediation details or workarounds, help track and identify asset inventory, log work tickets and exceptions and research vulnerability findings. * Must be able to quickly respond and assess exposure and impact of zero-day vulnerabilities and provide management with briefings and course of action for mitigation. Will also advise on other critical and high-risk vulnerabilities that may impact operations and critical infrastructure. * Perform compliance scanning to analyze configurations and make recommendations of hardening configurations for Windows OS including servers, endpoints, VDI and thin clients. * Perform ad hoc vulnerability scans to verify remediation. * Perform vulnerability management system administration functions, as required., Rapid7 Research Hardening Operations Management Mitigation Coordinating Azure DevOps Prioritization Network Security Business Valuation Reporting Processes Software Engineering Application Security System Administration Full Stack Development Vulnerability Scanning Artificial Intelligence Business Transformation Vulnerability Management Vulnerability Assessments Python (Programming Language) Internet Control Message Protocol (ICMP) Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) +0 ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Kubernetes Security - Challenge and Opportunity](https://www.wearedevelopers.com/videos/412-kubernetes-security-challenge-and-opportunity) - [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)