Application Security Analyst
Role Overview
Key Responsibilities:
Application Security & Testing
Perform security testing: SAST, DAST, IAST, mobile security, and dynamic testing
Analyze vulnerabilities and recommend secure coding fixes
Demonstrate vulnerabilities to development teams
Drive remediation efforts to closure
DevSecOps & Tooling
Work within CI/CD pipelines using tools such as: Jenkins, GitLab, GitHub Actions, TeamCity Checkmarx, GitHub Advanced Security, Burp Suite
Jenkins, GitLab, GitHub Actions, TeamCity
Checkmarx, GitHub Advanced Security, Burp Suite
Integrate security controls into development workflows
WAF & Security Controls
Lead Web Application Firewall (WAF) deployment for new and existing apps
Implement application security policies, controls, and standards
Collaboration & Enablement
Partner with development, platform, and supplier teams
Provide clear remediation guidance
Train teams on secure coding and application security practices
Develop training materials
Assessment & Reporting
Conduct security assessments using standard tools
Track and report: Risks Milestones Deliverables Status updates
Risks
Milestones
Deliverables
Status updates
Recommend strategies based on application risk posture
This role is based in Auburn Hills, MI and is required to be on-site in our HQ building 5 days per week.
Key Skills for This Role
Full Job Posting
Job Overview
Key Responsibilities:
Application Security & Testing
Perform security testing: SAST, DAST, IAST, mobile security, and dynamic testing
Analyze vulnerabilities and recommend secure coding fixes
Demonstrate vulnerabilities to development teams
Drive remediation efforts to closure
DevSecOps & Tooling
Work within CI/CD pipelines using tools such as: Jenkins, GitLab, GitHub Actions, TeamCity Checkmarx, GitHub Advanced Security, Burp Suite
Jenkins, GitLab, GitHub Actions, TeamCity
Checkmarx, GitHub Advanced Security, Burp Suite
Integrate security controls into development workflows
WAF & Security Controls
Lead Web Application Firewall (WAF) deployment for new and existing apps
Implement application security policies, controls, and standards
Collaboration & Enablement
Partner with development, platform, and supplier teams
Provide clear remediation guidance
Train teams on secure coding and application security practices
Develop training materials
Assessment & Reporting
Conduct security assessments using standard tools
Track and report: Risks Milestones Deliverables Status updates
Risks
Milestones
Deliverables
Status updates
Recommend strategies based on application risk posture
This role is based in Auburn Hills, MI and is required to be on-site in our HQ building 5 days per week.
Qualifications
- Bachelor’s degree in Computer Science, Information Technology, or related field
- 3+ years of hands-on experience in application security, security testing, and DevSecOps
- Strong understanding of: Application architectures (web, mobile, APIs) Software development methodologies (Agile, SDLC) Modern programming languages (Java, C#, Python)
- Application architectures (web, mobile, APIs)
- Software development methodologies (Agile, SDLC)
- Modern programming languages (Java, C#, Python)
- Experience performing and interpreting results from: SAST, DAST, IAST, SCA, and mobile security testing tools
- SAST, DAST, IAST, SCA, and mobile security testing tools
- Hands-on experience with secure code review in common languages (Java, C#, Python preferred)
- Prior background in application development, including: Compiled code Web applications / services Mobile app development
- Compiled code
- Web applications / services
- Mobile app development
- Knowledge of security frameworks and standards: NIST, ISO 27001 NIST SSDF or similar secure development frameworks
- NIST, ISO 27001
- NIST SSDF or similar secure development frameworks
- Strong understanding of: OWASP Top 10 vulnerabilities and mitigation techniques Common attack vectors (web exploits, DDoS, bot attacks)
- OWASP Top 10 vulnerabilities and mitigation techniques
- Common attack vectors (web exploits, DDoS, bot attacks)
- Experience with WAF technologies: Akamai, Cloudflare, AWS WAF, Azure Front Door
- Akamai, Cloudflare, AWS WAF, Azure Front Door
- Familiarity with cloud platforms and modern environments: AWS, Azure, GCP Containers (Docker, Kubernetes)
- AWS, Azure, GCP
- Containers (Docker, Kubernetes)
- Working knowledge of: Programming/scripting: Java, JavaScript, SQL, HTML Scripting languages (Python, Bash preferred)
- Programming/scripting: Java, JavaScript, SQL, HTML
- Scripting languages (Python, Bash preferred)
- Strong analytical, problem-solving, and communication skills Ability to explain technical risks to non-technical audiences Experience writing security reports and documentation
- Ability to explain technical risks to non-technical audiences
- Experience writing security reports and documentation
- Ability to work independently and cross-functionally
Preferred Qualifications:
- Industry certifications: GIAC GWEB ISC2 CSSLP EC-Council CASE Or equivalent AppSec certifications
- GIAC GWEB
- ISC2 CSSLP
- EC-Council CASE
- Or equivalent AppSec certifications
Health & Wellbeing
Comprehensive coverages encompassing the Physical, Mental, Emotional, and overall Wellbeing of our employees, including short- and long-term disability.
Compensation, Savings, and Retirement
- Annual Incentive Plan (SAIP), 401k with Employer Match & Contribution (max 8%), SoFi Student Loan Refinancing.
Time Away from Work
Paid time includes company holidays, vacation, and Float/Wellbeing Days.
Family Benefits
- 12 Weeks paid Parental Leave, Domestic Partner Benefits, Family Building Benefit, Marketplace, Life/Disability and other Insurances.
Professional Growth
Annual training, tuition reimbursement and discounts, Business Resource & Intra-professional Groups.
Company Car & More
Comprehensive Company Car Program and Vehicle Discounts. Vehicle discounts include family and friends.
EOE/Disability/Veteran
At Stellantis, we assess candidates based on qualifications, merit, and business needs. We welcome applications from all people without regard to sex, age, ethnicity, nationality, religion, sexual orientation, disability, or any characteristic protected by law. We believe that diverse teams reflect our identity as a global company, enabling us to better address the evolving needs of our customers and care for our future.
Our benefits reflects the STELLANTIS commitment to helping you reach your personal and professional goals. In addition to an environment that promotes career development, we offer benefits for a healthy lifestyle and a rewarding future, designed to take care of you and your family, in various stages of life.
As a global company, our employee packages will vary by country, customary norms and the legal entity into which you are hired.
We care about your privacy. For more information on how your personal data is processed, please read the specific Privacy Statement provided by the respective entities whose job offer you have selected.
About Stellantis
Global automotive manufacturer and provider of innovative mobility solutions.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Stellantis
Project Milestone Assessor
, USA
Project Milestone Keeper
, USA
Technology Manager
, USA
Dealer Reimbursement Analyst
, USA
Indirect Purchasing Savings Analyst
, USA
Technology Manager
, USA
Parts Distribution Center Supervisor
, USA
Vehicle Chassis Rolls Lab. Driver/Mechanic
, USA