> Markdown version of [/jobs/ext/4247014-application-security-analyst](https://www.wearedevelopers.com/jobs/ext/4247014-application-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Analyst

- **Company:** CCC Intelligent Solutions
- **Location:** Chicago, IL, United States
- **Salary:** $56,931.0 - $70,000.0
- **Contract:** Permanent contract
- **Skills:** JavaScript (Programming Language), Application Programming Interfaces (APIs), Amazon Web Services, Applications Architecture, Software System Penetration Testing, Microsoft Azure, Burp Suite, Cloud Computing Security, Static Program Analysis, CompTIA Security+, Cyber Security, Dynamic Program Analysis, Github, Python (Programming Language), Open Source Technology, Open Web Application Security, Windows PowerShell, Secure Coding, Software Engineering, Software Vulnerability Management, Web Applications, Scripting, Spring Cloud, Software Security, Veracode, Gitlab, GWAPT, Information Technology, Checkmarx, Software Version Control, Automation Anywhere, Static Application Security Testing, Golang, Dynamic Application Security Testing
- **Published:** October 8, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=773380aa5d7c1957

## About the Role

* Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.
 * Understanding of common web application vulnerabilities, including the OWASP Top 10.
 * Experience working with security testing tools such as SAST, DAST, SCA, and secrets detection platforms.
 * Knowledge of application architectures, APIs, cloud-native applications, and modern development practices.
 * Experience with scripting languages such as Python, PowerShell, JavaScript, Go, or similar.
 * Familiarity with CI/CD pipelines and source control platforms such as GitHub, GitLab, or Azure DevOps.
 * Strong analytical, troubleshooting, and communication skills.
 * Ability to effectively communicate technical findings to both technical and non-technical stakeholders., * Experience with software supply chain security programs.
 * Familiarity with tools such as Endor Labs, Wiz, GitHub Advanced Security, Veracode, Checkmarx, Burp Suite, or similar technologies.
 * Knowledge of cloud security concepts across Azure, AWS, or GCP.
 * Experience automating security processes and workflow integrations.
 * Relevant certifications such as Security+, GSEC, CSSLP, GWAPT, OSCP, or related credentials.
 * Experience participating in secure architecture reviews and threat modeling exercises.

## Description

The Application Security Analyst is responsible for helping embed security throughout the software development lifecycle. This role partners closely with development, engineering, product, and platform teams to identify, assess, prioritize, and remediate application security risks. The analyst will support vulnerability management, security testing, secure coding initiatives, and security automation efforts that help strengthen the organization's overall security posture.

This position is ideal for an individual with a strong technical foundation, a passion for application security, and the ability to collaborate effectively across engineering teams to drive practical risk reduction., * Perform application security assessments, including static analysis, dynamic analysis, software composition analysis, and manual validation of findings.

 * Review and triage security findings, distinguishing true positives from false positives and helping development teams prioritize remediation efforts.
 * Support secure software development lifecycle (SSDLC) initiatives and security-by-design practices across engineering teams.
 * Conduct threat modeling and security reviews for new applications, services, and technology implementations.
 * Partner with development teams to identify security weaknesses and provide remediation guidance.
 * Assist with penetration testing coordination and validation of remediation activities.
 * Develop and maintain security metrics, reporting, and dashboards related to application security risk.
 * Support vulnerability management processes, including identification, prioritization, tracking, and verification of remediation efforts.
 * Create automation, scripts, and integrations that improve security workflows and reduce manual effort.
 * Evaluate software supply chain risks and support secure use of open-source components.
 * Assist in developing security standards, procedures, and secure coding guidance.
 * Deliver security awareness and secure coding training to engineering teams.
 * Support incident response activities involving application security vulnerabilities when required.
 * Be familiar with AI workflows and enablement, * Reduction in application security risk through effective vulnerability identification and remediation.
 * Timely validation and prioritization of security findings.
 * Increased adoption of secure development practices across engineering teams.
 * Improvements in security automation and operational efficiency.
 * Strong partnership and engagement with developers, architects, and product teams.
 * Contribution to measurable improvements in the organization's security posture.