Application Security Analyst

1. About Our Client:

The organization operates in the ecommerce sector with a focus on security and compliance in highly regulated industries such as healthcare. It addresses challenges related to securing software, especially AI/ML components, and maintaining readiness for audits including PCI, HIPAA, and HITRUST. The company emphasizes secure development practices and maintaining robust protections across its platforms.

2. About the Opportunity:

The Application Security Analyst role is responsible for integrating security into software development processes and protecting AI/ML systems from emerging threats. This hands-on position supports the information security team by securing code, managing security tools, and ensuring compliance with relevant audits. The role is central to embedding security within development pipelines and improving the organization''s overall security posture.

3. Responsibilities:

• Perform application security assessments using SCA, SAST, secrets management, and interactive testing tools
• Identify, triage, and prioritize vulnerabilities
• Integrate security testing into CI/CD pipelines
• Assess security risks in AI/ML applications, including model exposure and inference endpoints
• Secure AI APIs, plugins, and third-party integrations
• Tune security controls such as WAF, EDR, MDM, and cloud security technologies
• Conduct threat modeling and secure design reviews for applications and AI use cases
• Harden identity and access management ensuring least privilege
• Automate repetitive security tasks
• Collaborate with developers to remediate vulnerabilities and enhance secure coding
• Participate in on-call rotation for incident monitoring and response

4. Requirements:

• Minimum 2 years of experience in Application or Product Security
• Experience with secure code scanning tools (SCA, SAST)
• Strong knowledge of OWASP Top 10 vulnerabilities
• Experience securing APIs and microservices
• Familiarity with CI/CD pipelines
• Basic understanding of AI/ML systems
• Experience with cloud security
• Scripting skills in Python or Bash
• Effective communication skills with technical and non-technical stakeholders
• Security mindset focused on identifying potential failures

Preferred:

• Experience with ML frameworks
• Familiarity with AI threat models
• Experience with WAF or API security solutions
• Strong coding skills in Python, Bash, or similar
• Experience in regulated industries such as ecommerce or healthcare

5. Pay Range and Compensation Package:

• Compensation: $75,000 - 95,000
• Discretionary Annual Bonus Eligibility: Up to 10%

6. Benefits & Perks:

• Medical, Dental, Vision insurance
• 401(k) with company match
• Dependent Care, FSA & HSA accounts
• Paid parental and bonding leave
• Flexible PTO and office closure on major holidays
• Monthly wellness and internet reimbursements
• Professional development including certification support and leadership coaching
• Mental health resources
• 100% remote work within the United States with EST hours requirement

Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.

Note:

RemoteHunter is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.