> Markdown version of [/jobs/ext/4694800-information-security-analyst-app-security-ai-security](https://www.wearedevelopers.com/jobs/ext/4694800-information-security-analyst-app-security-ai-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Analyst (App Security & AI Security) - **Company:** BLUESCOPE STEEL LIMITED - **Location:** Cleveland, OH, United States - **Experience:** Starter - **Contract:** Internship / Graduate position - **Skills:** Java (Programming Language), JavaScript (Programming Language), Application Programming Interfaces (APIs), Artificial Intelligence, Software Applications, Software System Penetration Testing, Microsoft Azure, Business Systems, Cloud Computing, Cyber Security, Continuous Integration, Data Security, DevOps, Monitoring of Systems, Internet Security, Python (Programming Language), Open Web Application Security, Windows PowerShell, Systems Development Life Cycle, Secure Coding, Software Engineering, Software Vulnerability Management, Web Applications, Scripting, Software Security, Information Technology, CIS Benchmarks, Operating System Security, Api Management, Static Application Security Testing, Vulnerability Analysis, Programming Languages, Dynamic Application Security Testing - **Published:** November 12, 2026 - **Apply:** https://www.careerbuilder.com/job-details/information-security-analyst-app-security-ai-security-cleveland-oh--d39e624f-e0d1-4a7c-89bc-d55ca6f2e91b ## About the Role Information/Data Security (InfoSec), Security Analysis, Applications Security, Artificial Intelligence (AI), Global Branding, Technical Leadership, Analysis Skills, Applications Security, Protective Services, Internet Security, * Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline * 1-3 years of experience in cybersecurity, information security, application support, software development, systems administration, or a related technology field. * Foundational understanding of cybersecurity principles, vulnerability management, risk management, and security controls. * Familiarity with application security concepts, including secure coding practices, OWASP Top 10 risks, and the Software Development Lifecycle. * Exposure to vulnerability assessment, application security testing, or security monitoring technologies. * Basic understanding of cloud, web application, API, network, and operating system security concepts. * Familiarity with a scripting or programming language such as PowerShell, Python, JavaScript, Java, or a similar language. * Strong analytical, organizational, documentation, and problem-solving skills. * Effective written and verbal communication skills and the ability to collaborate with globally distributed teams. * Ability to work primarily during U.S. business hours, with periodic schedule flexibility for global collaboration or critical security events. Desired Qualifications: To be considered an ideal candidate, you should possess some or all of the following qualifications: * Internship or professional experience supporting cybersecurity, application development, DevOps, cloud, infrastructure, or vulnerability management activities. * Familiarity with SAST, DAST, SCA, API security testing, dependency scanning, or penetration testing tools. * Exposure to CI/CD pipelines, source code repositories, cloud platforms, containers, or modern application architectures. * Knowledge of NIST, CIS Controls, ISO 27001, OWASP, or similar security frameworks and guidance. * Entry-level or associate security certification such as Security+, SSCP, GSEC, Azure Security Engineer Associate, or a comparable credential. * Experience working in a manufacturing, industrial, or globally distributed organization. ## Description The Cybersecurity & Application Security Analyst plays an important role in helping protect BlueScope North America's information assets, business systems, and software applications. The position is structured with an equal focus on cybersecurity operations and application security. The analyst supports day-to-day security activities across BlueScope North America while coordinating application security practices and services for global stakeholders operating across multiple regions. Working primarily during U.S. business hours, the analyst partners with regional and global technology teams to identify vulnerabilities, support remediation, promote secure development practices, and improve security processes. This position is designed for an early-career cybersecurity professional who has foundational technical experience and is interested in developing broad cybersecurity capabilities together with specialized application security expertise. Key Focus Areas Cybersecurity Operations * Support cybersecurity operations across BlueScope North America. * Participate in security monitoring, investigation, and incident response activities under the direction of senior security team members. * Participate in security monitoring, investigation, and incident response activities under the direction of senior security team members * Maintain operational documentation, procedures, metrics, and status reporting for cybersecurity activities. * Monitor relevant security threats and vulnerabilities and escalate issues that may affect BlueScope operations. Application Security * Support application security activities for BlueScope applications and development teams globally while operating primarily during U.S. business hours. * Assist with security reviews for internally developed, externally developed, and third-party applications. * Use application security testing capabilities such as static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), API testing, and dependency scanning. * Partner with development and technology teams to promote secure coding, security-by-design, and secure Software Development Lifecycle (SDLC) practices. * Assist with application threat modeling, security requirements, and design reviews for new applications and significant changes. * Document application security findings, provide practical remediation guidance, and track findings through closure. * Validate corrective actions and help identify recurring issues that can be addressed through standards, training, or automation. Security Tools & Process Improvement * Assist with the administration, configuration, and improvement of cybersecurity and application security tools. * Support the integration of security testing into development and CI/CD workflows in partnership with development and platform teams. * Use scripting or automation to improve repeatable security tasks, data collection, reporting, and workflow efficiency. * Develop and maintain dashboards and metrics that communicate security findings, remediation progress, and program performance. Governance, Compliance & Assurance * Support security activities aligned with applicable BlueScope requirements and recognized frameworks such as NIST Cybersecurity Framework, CIS Controls, ISO 27001, and OWASP guidance. * Assist with internal and external audit requests involving cybersecurity and application security controls. * Maintain clear records of security reviews, findings, remediation activities, exceptions, and risk decisions. * Contribute to the development and maintenance of security standards, procedures, and technical guidance. Collaboration & Communication * Build effective working relationships with application development, infrastructure, cloud, project, and business teams. * Coordinate with global stakeholders across regions and time zones to support application security activities and priorities. * Communicate security findings and recommended actions clearly to technical and non-technical audiences. * Support security awareness activities related to vulnerability management, secure development, and application security practices. * Seek guidance when needed and actively build technical knowledge through hands-on experience, training, and collaboration., * This position is part of BlueScope North America and operates primarily during U.S. business hours. * The role supports global application security responsibilities and requires collaboration with stakeholders in multiple regions and time zones. * Periodic work outside standard U.S. business hours may be required for planned global collaboration or critical security events. * BlueScope embraces flexible working arrangements where possible and mutually agreed., The preceding job responsibilities and tasks were designed to indicate the general nature and level of work performed by associates in this job. It is not designed to contain or be interpreted as a comprehensive inventory of all job duties and responsibilities required of associates assigned to this job. Associates may be required to perform other duties as assigned. Additional job competencies, individual goals, and performance measurements are set at the department level.