{bc}
Apply
workable

Application Security Analyst

PlanetArt
Woodridge, USA
Full-time
Mid · 3–5 years experience
Onsite
Discovered Today
awsazuregcp

Full Job Posting

Key Responsibilities

  • Manage vulnerabilities identified through SAST, DAST, and other application security tools.
  • Validate, prioritize, and assign vulnerabilities to Application Development (AppDev) teams; track remediation efforts and verify closure.
  • Oversee the Bug Bounty program, including triage, validation, and coordination with AppDev and external researchers.
  • Conduct threat intelligence research to identify risks to applications and the broader organization.
  • Support MSSP-provided security notifications through validation, triage, and assignment of issues.
  • Collaborate with AppDev to improve secure coding practices and provide remediation guidance.
  • Use approved AI tools to assist with vulnerability triage, code review, threat research, and remediation guidance; independently validate findings and recommendations before acting on them.
  • Review AI-generated code and AI-assisted development workflows for security weaknesses, and help AppDev teams apply secure coding and testing practices.
  • Assess AI-enabled applications and integrations for risks such as prompt injection, sensitive data exposure, insecure output handling, and excessive permissions in AI agents and connected tools.
  • Follow company policies for AI use, protect source code, credentials, and confidential data, and contribute to guidance for evaluating AI tools and third-party AI services.
  • Contribute to organizational GRC initiatives, audits, and compliance efforts.
  • Provide support for cloud security initiatives and third-party risk management reviews.

Requirements

  • What You Should Have
  • Skills, Qualifications, and Requirements
  • Bachelor’s degree in Computer Science, Cybersecurity, or equivalent experience.
  • 3–5 years of experience in application security, vulnerability management, or related role.
  • Hands-on experience with SAST/DAST tools (Snyk required; Semgrep preferred).
  • Knowledge of OWASP Top 10, CWE, and secure development practices.
  • Practical experience using generative AI tools or AI-assisted security and development tools, including writing effective prompts, verifying outputs, and recognizing inaccurate or unsupported results.
  • Working knowledge of large language models (LLMs), common AI application security risks, and controls such as input and output validation, access restrictions, and protection of sensitive data.
  • Ability to evaluate AI-generated code and security recommendations using manual review and established testing tools; understanding of responsible AI use and data handling requirements.
  • Familiarity with bug bounty platforms and coordinated vulnerability disclosure processes.
  • Understanding of threat intelligence processes and incident response workflows.
  • Strong written and verbal communication skills with the ability to collaborate across technical and business teams.
  • Preferred: Experience with cloud platforms (AWS, GCP, Azure), GRC frameworks (NIST CSF, ISO 27001, SOC 2), and professional certifications (GWAPT, OSWE, GWEB, CEH, CISSP). Familiarity with security testing of LLM applications, retrieval-augmented generation (RAG), AI agents, or AI service integrations is also preferred.
  • What You Can Expect
  • Working Conditions
  • Work is performed in an office environment with low to moderate noise levels.
  • Occasional lifting of up to 20 pounds.
  • Position requires regular, continuous use of computer.
  • Position requires regular sitting and standing.
  • Position requires regular interaction with team members through the following methods: in-person, phone, WebEx, Slack, or email.
  • May require occasional travel.
  • This is a hybrid position; employees are expected to be in the office three days per week (Monday, Tuesday, and Thursday) with the option of working remotely two days (Wednesday and Friday).

Benefits

  • PlanetArt offers a comprehensive benefits package, including:
  • Health, Dental, and Vision Insurance
  • Life Insurance
  • 401(k) with matching
  • Excellent Work/Life Balance – Paid Time Off, Sick Days, Paid Holidays, and Floating Holidays
  • Employee Product Discounts

Preferred Qualifications

  • Hands-on experience with SAST/DAST tools (Snyk required; Semgrep preferred).
  • Preferred: Experience with cloud platforms (AWS, GCP, Azure), GRC frameworks (NIST CSF, ISO 27001, SOC 2), and professional certifications (GWAPT, OSWE, GWEB, CEH, CISSP). Familiarity with security testing of LLM applications, retrieval-augmented generation (RAG), AI agents, or AI service integrations is also preferred.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at PlanetArt

Network Security Engineer

Woodridge, USA

Discovered TodayFull-time

Sr. Paid Search Marketing Manager (PPC)

Pleasanton, USA

Discovered 3 days agoFull-time

Sr. E-commerce Pricing Analyst

Calabasas, USA

Discovered 1 weeks agoFull-time

Sr. E-commerce Pricing Analyst

Calabasas, USA

Discovered 1 weeks agoFull-time

Seasonal IT Support Technician

Woodridge, USA

Discovered 1 weeks agoTemporary

Indigo Fulfillment Lead

Woodridge, USA

Discovered 2 weeks agoFull-time

Art Director

Calabasas, USA

Discovered 2 weeks agoFull-time

Content Director, Paid Social Advertising

Calabasas, USA

Discovered 2 weeks agoFull-time