Scalence L.L.C. · 4 weeks ago
Application Security Analyst
Elkhorn, NE
Full-time
Hybrid
Mid LevelScalence L.L.C. is seeking an Application Security Analyst to join their dynamic team, where you'll play a crucial role in safeguarding applications and APIs. The role involves managing security intake processes, coordinating with development teams, and performing security assessments to ensure compliance with organizational standards.
Information Technology & Services
No H1B
Responsibilities
Manage new API security intake requests, ensuring proper documentation and risk assessment
Coordinate with development teams to gather additional technical details for security reviews
Track and ensure timely responses between security and development teams for remediation and clarifications
Maintain and optimize application security scanning schedules for APIs, containers, and applications
Perform and validate DAST and SAST scans, analyze results, and drive remediation
Oversee container security assessments, ensuring compliance with organizational standards
Document findings, create actionable reports, and communicate risks effectively to technical and non-technical stakeholders
Support knowledge transfer from outgoing consultants and ensure continuity of security processes
Qualification
Required
Applicants must be able to work directly for the company on a W2 basis
Hands-on experience with API security testing and vulnerability management
Strong knowledge of DAST and SAST tools (e.g., Burp Suite, OWASP ZAP, Veracode, Checkmarx, Fortify)
Familiarity with container security (e.g., Docker, Kubernetes, image scanning tools like Anchore or Trivy)
Proven ability to manage security intake processes and coordinate across multiple development teams
Solid understanding of secure coding practices, OWASP Top 10, and API-specific security risks
Excellent communication and stakeholder management skills for cross-team collaboration
Ability to work independently and hit the ground running in a fast-paced environment
Preferred
Experience with CI/CD pipeline integration for security tools
Knowledge of cloud-native security (AWS, Azure, GCP) and API gateways
Familiarity with threat modeling and risk assessment methodologies
Exposure to DevSecOps practices and automation of security testing
Certifications such as CSSLP, GWAPT, or API Security Specialist
Benefits
Inclusive and diverse work environment.
Opportunities for professional growth and development.
Supportive and collaborative team culture.
Company
Scalence L.L.C.
In today’s dynamic and competitive market, success hinges on mastering three key areas: Data Intelligence, Business Resilience, and Digital Experience.
501-1000 employees
Funding
Current Stage
Late StageCompany data provided by crunchbase