> Markdown version of [/jobs/ext/730372-information-security-analyst-senior-or-lead-application-security](https://www.wearedevelopers.com/jobs/ext/730372-information-security-analyst-senior-or-lead-application-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Analyst Senior or Lead- Application Security - **Company:** The Progressive Corporation - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $107,550.0 - $146,900.0 - **Contract:** Permanent contract - **Skills:** Adobe InDesign, Burp Suite, Cyber Security, Fiddler (Software), Intrusion Detection and Prevention, Python (Programming Language), Windows PowerShell, Security Assertion Markup Language (SAML), SQL Injection, Scripting, Postman, Software Security, Vulnerability Analysis - **Published:** June 29, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=7e39d8e14a7262b1 ## About the Role Do you have a Master's degree?, * A minimum of eight years related work experience. * {OR} Bachelor's degree and a minimum of five years relevant work experience. * {OR} Master's degree or higher and a minimum of three years relevant work experience. Preferred skills * Experience with tools such as Burp Suite, OWASP ZAP, Fiddler and/or Postman * Scripting experience with PowerShell or Python * Vulnerability scanning experience * Security Assertion Markup Language experience * Experience with security risks and methods of prevention, such as SQL injection, encryption, and intrusion detection, Applicants must be authorized to work for any employer in the U.S. without the need or potential need, of current or future sponsorship for employment. Progressive does not hire candidates with (e.g., F-1 CPT, OPT, or STEM OPT, H-1B, O-1, E-3, TN) statuses for this role. ## Description As an information security analyst senior or lead- application security, you'll be a part of a team conducting security tests, reviewing code for vulnerabilities, and identifying potential areas of security improvement in design or implementation, reporting all findings to stakeholders. In this role, you'll be serving as a subject matter expert (SME) in application security for enterprise projects, providing information security consulting and ensuring the implementation of approved security requirements. In addition, you'll be focused on defining functional requirements, working with development teams, and associated testing. Furthermore, you'll be advocating for security enhancements and improvements throughout the enterprise while fostering and building security champions on application teams. ## Related Videos - [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor) - [Are Your APIs Ready for AI Agents](https://www.wearedevelopers.com/videos/2004-are-your-apis-ready-for-ai-agents) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Why Security-First Development Helps You Ship Better Software Faster](https://www.wearedevelopers.com/videos/1568-why-security-first-development-helps-you-ship-better-software-faster) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)