Information Security Analyst

Information Security Analyst
- Applications

Georgia, United States

Position is open to Calhoun GA & Dallas TX

• Perform application security assessments—including SAST, DAST, and software composition analysis (SCA)—across the software development lifecycle (SDLC).
• Support manual and automated security code reviews, providing clear, actionable remediation guidance to development teams.
• Assist with internal and third-party penetration testing engagements; document findings and track remediation progress through closure.
• Manage and prioritize application vulnerabilities within the vulnerability tracking program, ensuring accurate risk ratings and timely remediation follow-up.
• Collaborate with Dev Ops and engineering teams to integrate security tooling (SAST, secrets scanning, dependency checking) into CI/CD pipelines.
• Contribute to the development and maintenance of App Sec policies, standards, secure coding guidelines, and assessment procedures.
• Participate in developer security training and awareness initiatives; serve as a day-to-day security resource for application teams.
• Support App Sec program reporting, including metrics collection, trend analysis, and contribution to quarterly business reviews (Q ).
• Assist in evaluating and onboarding new application security tools and technologies to mature program capabilities.
• Perform other duties as needed.

• B.S. in Computer Science, Information Systems Security, Software Engineering, or a related field.
• 1–3 years of experience in information security, application development, or a combination with a demonstrated security focus.
• Working knowledge of the OWASP Top 10, CWE/CVE frameworks, and common vulnerability classes (injection, broken authentication, IDOR, etc.).
• Hands‑on familiarity with security testing tools such as Burp Suite, Git Hub CodeQL, Checkmarx, Veracode, Snyk, or comparable platforms.
• CSSLP, CEH, Security+, GWEB, or other relevant certifications are a plus.

• Strong written and verbal communication skills; ability to translate technical vulnerability findings into clear, business‑relevant language for developers, project managers, and non‑technical stakeholders without sacrificing accuracy.
• A methodical, evidence‑based approach to problem‑solving—able to investigate ambiguous security signals, connect findings to business risk, and recommend proportionate, pragmatic remediation steps.
• Demonstrated curiosity and a continuous learning mindset; willingness to stay current on emerging threats, CVEs, and evolving application security techniques, and to share that knowledge proactively with teammates and development partners.
• Collaborative work style with the ability to build productive working relationships across engineering, Dev Ops, GRC, and business teams; comfort operating in environments where influence must be earned rather than mandated.
• Ability to manage multiple concurrent assessments and remediation tracks with appropriate prioritization, visibility, and follow‑through—maintaining quality and responsiveness in a fast‑paced enterprise environment.
• Integrity and sound judgment; ability to handle sensitive findings, vulnerability data, and security program information with appropriate discretion in accordance with corporate standards.

Mohawk Industries, Inc. is an Equal Opportunity Employer including disability/veteran committed to an inclusive workplace and a proud Drugs Don't Work participant.