Information Security Analyst- Applications

The Application Security Analyst is a detail-oriented security professional who works to facilitate and support the application security function across the software development lifecycle. This role will be responsible for performing application security assessments, supporting secure code reviews and penetration testing, and partnering with development and DevOps teams to remediate vulnerabilities and mature secure coding practices.

What You'll Do:

· Perform application security assessments-including SAST, DAST, and software composition analysis (SCA)-across the software development lifecycle (SDLC).

· Support manual and automated security code reviews, providing clear, actionable remediation guidance to development teams.

· Assist with internal and third-party penetration testing engagements; document findings and track remediation progress through closure.

· Manage and prioritize application vulnerabilities within the vulnerability tracking program, ensuring accurate risk ratings and timely remediation follow-up.

· Collaborate with DevOps and engineering teams to integrate security tooling (SAST, secrets scanning, dependency checking) into CI/CD pipelines.

· Contribute to the development and maintenance of AppSec policies, standards, secure coding guidelines, and assessment procedures.

· Participate in developer security training and awareness initiatives; serve as a day-to-day security resource for application teams.

· Support AppSec program reporting, including metrics collection, trend analysis, and contribution to quarterly business reviews (QBR).

· Assist in evaluating and onboarding new application security tools and technologies to mature program capabilities.

· Perform other duties as needed.

· B.S. in Computer Science, Information Systems Security, Software Engineering, or a related field.

· 1-3 years of experience in information security, application development, or a combination with a demonstrated security focus.

· Working knowledge of the OWASP Top 10, CWE/CVE frameworks, and common vulnerability classes (injection, broken authentication, IDOR, etc.).

· Hands-on familiarity with security testing tools such as Burp Suite, GitHub CodeQL, Checkmarx, Veracode, Snyk, or comparable platforms.

· Basic understanding of web application architecture, APIs (REST/SOAP), and at least one programming or scripting language (Python, Java, C#, JavaScript, PowerShell, etc.).

· CSSLP, CEH, Security+, GWEB, or other relevant certifications are a plus.

What You're Good At:

· Strong written and verbal communication skills; ability to translate technical vulnerability findings into clear, business-relevant language for developers, project managers, and non-technical stakeholders without sacrificing accuracy.

· A methodical, evidence-based approach to problem-solving-able to investigate ambiguous security signals, connect findings to business risk, and recommend proportionate, pragmatic remediation steps.

· Demonstrated curiosity and a continuous learning mindset; willingness to stay current on emerging threats, CVEs, and evolving application security techniques, and to share that knowledge proactively with teammates and development partners.

· Collaborative work style with the ability to build productive working relationships across engineering, DevOps, GRC, and business teams; comfort operating in environments where influence must be earned rather than mandated.

· Ability to manage multiple concurrent assessments and remediation tracks with appropriate prioritization, visibility, and follow-through-maintaining quality and responsiveness in a fast-paced enterprise environment.

· Integrity and sound judgment; ability to handle sensitive findings, vulnerability data, and security program information with appropriate discretion in accordance with corporate standards.

At Mohawk Industries, we're committed to more - more customer solutions, more process improvements, more sustainable manufacturing and more opportunities for our team. As a Fortune 500, global flooring leader with some of the best-known brands in the industry, Mohawk is a great place to start or develop your career with an emphasis on more of what's important to you. Whether you want to lead more, innovate more, learn more or create more, you can find your more with Mohawk., Mohawk Industries is a leading global flooring manufacturer that creates products to enhance residential and commercial spaces around the world. Mohawk's vertically integrated manufacturing and distribution processes provide competitive advantages in the production of carpet, rugs, ceramic tile, laminate, wood, stone and vinyl flooring. Our industry-leading innovation has yielded products and technologies that differentiate our brands in the marketplace and satisfy all remodeling and new construction requirements. Our brands are among the most recognized in the industry and include American Olean, Daltile, Durkan, IVC, Karastan, Marazzi, Mohawk, Mohawk Home, Pergo, and Quick-Step. During the past decade, Mohawk has transformed its business from an American carpet manufacturer into the world's largest flooring company with operations in Australia, Brazil, Canada, Europe, India, Malaysia, Mexico, New Zealand, Russia and the United States. Mohawk Industries, Inc. is an Equal Opportunity Employer including disability/veteran committed to an inclusive workplace and a proud Drugs Don't Work participant.