Information Security Analyst

Here at Appian, our values of Intensity and Excellence define who we are. We set high standards and live up to them, ensuring that everything we do is done with care and quality. We approach every challenge with ambition and commitment, holding ourselves and each other accountable to achieve the best results. When you join Appian, you’ll be part of a passionate team dedicated to accomplishing hard things, together.

McLean, Virginia | Work Model:
On-site at Appian Headquarters

The Information Security team is the guardian of trust at Appian, protecting the infrastructure that powers AI-Powered Process Automation for the world’s most demanding enterprises and government agencies. We operate with autonomy and urgency, identifying security risks across the organization and ensuring vulnerabilities are resolved within strict SLAs. Our work directly enables Appian's ability to serve highly regulated industries and maintain certifications that unlock enterprise growth.

As enterprises accelerate their adoption of AI-Powered Process Automation, security and compliance have become the foundation of customer trust. This role exists because Appian's growth in government and regulated sectors demands relentless focus on vulnerability management and FedRAMP audit readiness. You will be at the center of cross-functional collaboration, translating security findings into actionable remediation plans that protect our platform and our customers.

• Lead comprehensive vulnerability assessments across Appian's infrastructure using industry-standard tools, identifying and prioritizing security risks based on severity and business impact.
• Partner with Engineering teams to drive timely remediation of vulnerabilities and misconfigurations, ensuring all findings meet contractual SLAs and regulatory requirements including FedRAMP standards.
• Execute audit preparation and support activities for FedRAMP and other compliance frameworks, providing evidence documentation and coordinating responses to auditor findings.
• Analyze security data and trends using advanced Excel techniques and vulnerability management platforms, delivering actionable insights to leadership on risk posture and remediation progress.
• Collaborate with cross-functional stakeholders across Product, Cloud Operations, and Compliance teams to implement security best practices and reduce the attack surface of our Enterprise-Grade Orchestration platform.

• Education:
  
  Hold a Bachelor's degree or higher in Computer Science, Cybersecurity, Information Systems, or a related STEM field.
• Experience:
  
  2+ years of experience in information security, vulnerability management, or security operations within enterprise technology environments.
• Vulnerability Management:
  Hands-on experience with vulnerability scanning and management platforms such as Nessus or Qualys, including configuration, scan execution, and results analysis.
• Compliance Expertise:
  Working knowledge of FedRAMP audit processes, controls frameworks, and regulatory compliance requirements in government or highly regulated industries.
• Data Analysis:
  Advanced proficiency in Excel for data manipulation, trend analysis, and reporting of security metrics and vulnerability status.
• Audit Coordination:
  Demonstrated ability to support security audits by preparing documentation, responding to findings, and tracking remediation activities to closure.

• Security
  
  Certifications:
  
  Industry-recognized certifications such as Security+, CEH, CISSP, or GIAC demonstrating commitment to the security profession.
• Cloud Security:
  Experience with cloud infrastructure security in AWS, Azure, or Google Cloud Platform environments.
• Scri…