Application Security Analyst

Consumers Credit Union•Lake Forest, IL

1d•$67,980 - $108,768•Hybrid

About The Position

Join a Great Place to Work certified company - our Information Security Team is seeking an Application Security Analyst! Are you passionate about securing applications and helping development teams build software that is resilient against evolving cyber threats? We are seeking a detail-oriented, curious, and collaborative Application Security Analyst to play a critical role in strengthening our application security program. This is a new and exciting opportunity where you’ll work closely with software development, business systems, information technology, and other teams to identify vulnerabilities, implement security best practices, and integrate security throughout the Software Development Lifecycle (SDLC). If you’re an application security professional or developer who thrives in a fast-paced environment and enjoys solving complex security challenges, we'd love to hear from you.

Requirements

2 years’ experience performing SAST and DAST
Strong understanding of secure coding practices and SDLC integration
Hands-on experience with AppSec tools and vulnerability management such as Veracode, Checkmarx, or Burp Suite
Ability to translate technical findings into actionable guidance for developers
Curiosity and commitment to staying ahead of evolving cyber threats
Strong communication and collaboration skills

Nice To Haves

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field
2+ years’ experience in application security or software development with security responsibilities or 4+ years’ experience in lieu of education
Certifications in CSSLP, CASE, or GWEB

Responsibilities

Perform static and dynamic application security testing (SAST/DAST) using tools such as Veracode, Checkmarx, or Burp Suite
Identify and analyze vulnerabilities, partnering with developers to drive timely, effective remediation
Configure and optimize Web Application Firewall (WAF) rules; monitor logs to detect and mitigate threats
Participate in secure design reviews, threat modeling, and architecture assessments
Support API security, including authentication methods (OAuth, API keys) and secure data handling practices
Track remediation efforts across teams, validate fixes, and document closure of vulnerabilities
Maintain clear, up-to-date documentation on AppSec processes, tools, and standards
Stay current on OWASP Top 10, SANS CWE Top 25, and emerging application-layer threats