AWS Application Security Analyst

AWS Application Security Analyst

Job Type: Permanent Full-Time | Work Model:
Hybrid | Locations:
Birmingham, AL | Knoxville, TN | Columbia, SC | Lafayette, LA

Visa: USC, GC, EAD (No Sponsorship)

We are seeking an experienced AWS Application Security Analyst to support application security initiatives within a large-scale financial services environment. This role will partner closely with software development, cloud, Dev Ops, and cybersecurity teams to identify, assess, and remediate security risks throughout the Software Development Lifecycle (SDLC).

• Perform manual and automated application and source-code security reviews to identify vulnerabilities and security risks.
• Conduct threat modeling and application security risk assessments for new and existing applications.
• Work with development teams to determine appropriate remediation approaches for security findings.
• Utilize SAST, DAST, and Software Composition Analysis (SCA) tools for application security testing.
• Integrate application security controls and automated security testing into CI/CD pipelines
  .
• Evaluate application security risks across AWS cloud and containerized environments
  .
• Apply knowledge of secure coding practices, network protocols, encryption, authentication, and common application vulnerabilities.
• Partner with development, Dev Ops, cloud, and cybersecurity teams to strengthen Dev Sec Ops  practices throughout the SDLC.
• Develop security guidance, FAQs, standards, and reusable application security best practices for development teams.
• Clearly communicate vulnerabilities, security risks, and remediation recommendations to technical stakeholders.

• 5+ years of application security experience and strong knowledge of secure software development practices.
• Hands-on experience with SAST, DAST, and SCA tools
  .
• Experience performing manual code reviews and application security assessments.
• Strong experience with threat modeling and security risk assessments
  .
• Working knowledge of AWS security and securing applications deployed in AWS environments.
• Experience with Dev Sec Ops and integrating security testing into CI/CD pipelines.
• Experience with Git Hub, Jenkins, or similar CI/CD platforms
  .
• Understanding of container security and associated application security risks.
• Programming or code-review experience with Java, Python, JavaScript, C#, or similar languages
  .
• Strong understanding of:
  • Network protocols
  • Encryption
  • Authentication and authorization
  • Secure coding practices
  • Common application vulnerabilities
• Strong communication skills with the ability to explain security findings and remediation recommendations to developers and technical teams.

• Experience with in financial services, banking, or another highly regulated environment
  .
• Relevant security or cloud certifications such as:
  • AWS Certified Security – Specialty
  • CISSP
  • CSSLP
  • GIAC Application Security certifications

Bachelor's degree in
** Computer Science, Information Systems, Cybersecurity, or a related