Application Security Analyst

Role:

• Support and monitor enterprise information security systems as directed by management.
• Manage daily operations for Application Security products, including incident and ticket resolution.
• Provide expertise during incidents, document findings, and improve protocols.

Integration:

• Collaborate with business and IT partners to integrate SAST, DAST, and other security tools into CI/CD pipelines.
• Perform security reviews of Terraform configurations and reusable modules for Infrastructure as Code.
• Validate Terraform changes for security, compliance, and alignment with cloud architecture standards.

Monitoring:

• Write SIEM queries, analyze results, and respond to security incidents.
• Implement, configure, and manage Web Application Firewalls (WAFs), including tuning rulesets.
• Triage and remediate vulnerabilities from GitHub Advanced Security and Microsoft Defender for Cloud.