Analyst, IT Security - Applications

Knitwell Group

1d • Remote

About The Position

The Application Security Analyst is responsible, under the direction of the Director for Cyber Security Operations, for implementing and managing security tools and integrations at KnitWell Group. This includes integrations and automation related to DevSecOps, application vulnerability analysis, penetration testing, and code analysis. The analyst advises and assists the organization on related processes and projects, collaborating with engineering, support teams, and other IT partners to ensure applications and associated components are developed securely. The role also focuses on making processes efficient and reducing organizational risk so associates can work effectively and securely.

The position works remotely, with occasional travel to a company office potentially required. Applicants must be authorized to work for any employer in the United States without sponsorship.

Requirements

• Education and/or certifications in Computer Science, Information Systems, or another related field, or equivalent work experience.
• 3–5+ years of IT work experience, including at least 2 years working in application security.
• Working experience with security testing tools, including DAST, SAST, and SCA.
• Hands-on experience with manual web application penetration testing (VAPT).
• Proficiency with Burp Suite and Kali Linux tools.
• Experience with API testing.
• Knowledge of secure coding practices and frameworks such as OWASP and SSDF.
• Strong knowledge of application security principles.
• Knowledge of threat modeling and DevSecOps.
• Strong working knowledge of IT security best practices.
• Knowledge of policies and procedures, governance best practices and control frameworks (ITIL), and regulatory obligations (SOX and PCI) as they relate to information systems.
• Familiarity with software development methodologies such as Agile or DevOps.
• Knowledge of at least one of the following programming languages: Java, Python, or C++.
• Proficiency in scripting languages such as PowerShell, JavaScript, or SQL.
• Understanding of operating system platforms including Windows and UNIX.
• Must be authorized to work for any employer in the United States without sponsorship.

Responsibilities

• Perform DAST scans for internal and external applications.
• Conduct end-to-end penetration-testing engagements and risk assessments for e-commerce applications.
• Analyze scan results for false-positive vulnerabilities.
• Analyze security risks and produce vulnerability reports with recommendations.
• Collaborate with cross-functional teams to identify and solve complex security problems.
• Handle ad hoc SAST scan requests and vulnerability analysis.
• Participate in incident response activities and provide technical guidance on security-related incidents.
• Develop and maintain technical documentation related to application security.
• Implement and manage security tools and integrations, including integrations and automation related to DevSecOps, application vulnerability analysis, penetration testing, and code analysis.
• Advise and assist the organization on application-security processes and projects.

Benefits

• Merchandise discount at select KnitWell Group brands, subject to each brand’s discount policies.
• Support for individual development and opportunities for career mobility within the family of brands.
• Local volunteer opportunities, annual donation and volunteer match for eligible nonprofit organizations, and philanthropic activities supporting communities.
• Medical, dental, and vision insurance.
• 401(k).
• Employee Assistance Program (EAP).
• Paid time off and holidays.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed