Application Security Analyst II

Little Caesars Pizza•Detroit, MI

About The Position

The Application Security Analyst II supports the organization’s application security program by identifying, assessing, and helping remediate security risks throughout the software development lifecycle. The analyst partners with application development, engineering, architecture, infrastructure, risk, privacy, compliance, and cyber security teams to promote secure design and development practices. The role performs application security assessments, supports security testing and vulnerability management, documents security requirements, and helps integrate security controls into development and deployment processes. It also contributes to security awareness, governance reviews, and the ongoing improvement of application security tools and processes.

Requirements

Bachelor’s degree in Computer Science, Computer Engineering, Information Technology, Cyber Security, or a related technical field; a minimum of four years of relevant industry experience may be considered in lieu of a formal degree.
Minimum of three years of information technology experience, including at least one year in information security, application development, application security, or a closely related discipline.
Working knowledge of secure software development lifecycle practices and the ability to apply security requirements within Agile or other development methodologies.
Working knowledge of common application and API vulnerabilities, including the OWASP Top 10, and practical approaches to prevention and remediation.
Experience with one or more application security testing approaches or technologies, such as SAST, DAST, SCA, API security testing, secrets scanning, or container security scanning.
Ability to review and interpret application security findings, assess business and technical risk, and communicate clear remediation guidance to development and engineering teams.
Understanding of secure coding concepts and application security controls, including authentication, authorization, input validation, session management, encryption, secrets management, logging, and error handling.
Understanding of web technologies, APIs, cloud-hosted applications, source code management, and CI/CD concepts.
Familiarity with vulnerability management, risk acceptance, exception handling, and remediation tracking processes.
Strong analytical, problem-solving, documentation, and communication skills.
Ability to collaborate across teams, demonstrate customer orientation and service excellence, and work independently with general direction while managing competing priorities.

Nice To Haves

Hands-on experience with enterprise application security tools and developer security workflows.
Experience integrating security testing into CI/CD pipelines and development platforms.
Familiarity with one or more programming or scripting languages and the ability to understand application code.
Familiarity with cloud-native application architectures, containers, microservices, and infrastructure as code.
Application security or security-related certifications such as CSSLP, GIAC, CISSP, Security+, or comparable credentials.

Responsibilities

Perform application security assessments for new and existing applications, APIs, integrations, and supporting services.
Conduct or coordinate application security testing, including SAST, DAST, SCA, API security testing, and manual validation as appropriate.
Analyze application security findings, validate risk and impact, reduce false positives, and partner with development teams to prioritize and remediate vulnerabilities.
Participate in application threat modeling and secure design reviews, identifying risks and recommending practical security controls before deployment.
Define, document, communicate, and maintain application security requirements, standards, procedures, and supporting guidance.
Partner with development and engineering teams to integrate security checks and guardrails into source code management and CI/CD pipelines.
Provide consultative support on secure coding practices, application vulnerabilities, authentication, authorization, session management, secrets management, data protection, and API security.
Track application security risks, remediation plans, exceptions, and metrics; escalate material risks or overdue remediation through established governance processes.
Support the evaluation, implementation, administration, and continuous improvement of application security tools and processes.
Develop security guidance and share actionable application security recommendations with technical teams.
Participate in relevant project, change, architecture, and security governance reviews as needed.
Maintain awareness of emerging application security threats, vulnerabilities, attack techniques, and industry practices.
Collaborate effectively across teams, incorporate diverse perspectives, and contribute to shared objectives.
Consider customer needs in decision-making, build effective relationships, and develop solutions and processes that support a positive customer experience.
Analyze information, anticipate obstacles, develop solutions, use sound judgment and data, and communicate findings clearly.
Communicate effectively with technical and non-technical audiences, work independently with general direction, prioritize competing responsibilities, manage deadlines, and drive assigned work to completion.