Application Security Analyst

CCU • Lake Forest, IL

16h • Hybrid

About The Position

Join a Great Place to Work certified company - our Information Security Team is seeking an Application Security Analyst! Are you passionate about securing applications and helping development teams build software that is resilient against evolving cyber threats? We are seeking a detail-oriented, curious, and collaborative Application Security Analyst to play a critical role in strengthening our application security program. This is a new and exciting opportunity where you’ll work closely with software development, business systems, information technology, and other teams to identify vulnerabilities, implement security best practices, and integrate security throughout the Software Development Lifecycle (SDLC). If you’re an application security professional or developer who thrives in a fast-paced environment and enjoys solving complex security challenges, we'd love to hear from you.

Requirements

• 2+ years’ experience performing SAST and DAST
• Strong understanding of secure coding practices and SDLC integration
• Hands-on experience with AppSec tools and vulnerability management such as Veracode, Checkmarx, or Burp Suite
• Ability to translate technical findings into actionable guidance for developers
• Curiosity and commitment to staying ahead of evolving cyber threats
• Strong communication and collaboration skills

Nice To Haves

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field
• Certifications in CSSLP, CASE, or GWEB
• 2+ years’ experience in application security or software development with security responsibilities or 4+ years’ experience in lieu of education

Responsibilities

• Perform static and dynamic application security testing (SAST/DAST) using tools such as Veracode, Checkmarx, or Burp Suite
• Identify and analyze vulnerabilities, partnering with developers to drive timely, effective remediation
• Configure and optimize Web Application Firewall (WAF) rules; monitor logs to detect and mitigate threats
• Participate in secure design reviews, threat modeling, and architecture assessments
• Support API security, including authentication methods (OAuth, API keys) and secure data handling practices
• Track remediation efforts across teams, validate fixes, and document closure of vulnerabilities
• Maintain clear, up-to-date documentation on AppSec processes, tools, and standards
• Stay current on OWASP Top 10, SANS CWE Top 25, and emerging application-layer threats

Benefits

• medical (High Deductible, HMO and PPO)
• dental
• vision
• spending accounts
• short-term disability
• long-term disability
• life insurance
• 401(k) savings plan
• pension plan
• annual bonus opportunity

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level