Application Security Analyst

Planet Art’s vision is to be the leading seller of personalized and make-on-demand products worldwide. We provide consumers with unmatched tools and content and an unparalleled end-to-end customer experience that results in high-quality, meaningful finished products and memorable celebrations of life events.

The company’s brands include the popular Free Prints and Free Prints Photobooks apps and the industry leading Simplyto Impress card and stationery site, as well as Personal Creations, Cafe Press and ISeeMe! Visit  to learn more about our brands.

We have more than 500 team members across multiple offices, primarily in Calabasas CA, San Diego CA, Woodridge IL, Minneapolis, MN and Pleasanton, CA. We also have team members in two company-owned offices in China, as well as in Europe.

Planet Art is looking for an Application Security Analyst to support the company’s Security Department. The successful candidate will be responsible for securing our applications by managing vulnerabilities identified through Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and other application security software (currently Snyk, with possible future use of Semgrep). This role will also oversee the Bug Bounty program, provide support for security notifications from the MSSP, conduct threat intelligence research, and contribute to governance, risk, compliance (GRC), cloud security, and third-party risk management activities.

The analyst will use approved artificial intelligence (AI) tools to support security analysis and remediation, apply sound judgment to AI-generated outputs, and help assess the security of AI-enabled applications and development workflows.

PLEASE NOTE:

Candidates must be local to or willing to relocate to the (office) area as we operate on a hybrid work model (3 days onsite, 2 remote)

• Manage vulnerabilities identified through SAST, DAST, and other application security tools.
• Validate, prioritize, and assign vulnerabilities to Application Development (App Dev) teams; track remediation efforts and verify closure.
• Oversee the Bug Bounty program, including triage, validation, and coordination with App Dev and external researchers.
• Conduct threat intelligence research to identify risks to applications and the broader organization.
• Support MSSP-provided security notifications through validation, triage, and assignment of issues.
• Collaborate with App Dev to improve secure coding practices and provide remediation guidance.
• Use approved AI tools to assist with vulnerability triage, code review, threat research, and remediation guidance; independently validate findings and recommendations before acting on them.
• Review AI-generated code and AI-assisted development workflows for security weaknesses, and help App Dev teams apply secure coding and testing practices.
• Assess AI-enabled applications and integrations for risks such as prompt injection, sensitive data exposure, insecure output handling, and excessive permissions in AI agents and connected tools.
• Follow company policies for AI use, protect source code, credentials and confidential data, and contribute to guidance for evaluating AI tools and third‑party AI services.
• Contribute to organizational GRC initiatives, audits and compliance efforts.
• Provide support for cloud security initiatives and third-party risk management reviews.

• Bachelor’s degree in Computer Science, Cybersecurity, or equivalent experience.
• 3–5 years of experience in application security, vulnerability management, or related role.
• Hands‑on experience with SAST/DAST tools (Snyk required; Semgrep preferred).
• Knowledge of OWASP…