AWS Application Security Analyst
system oneColumbia (SC)
AWS Application Security Analyst
Posted today
system oneColumbia (SC)
SENIORITY
Lead
About the role
Job Description Job DescriptionAWS Application Security Analyst
Job Type: Permanent Full-Time
Work Model: Hybrid
Locations: Birmingham, AL | Knoxville, TN | Columbia, SC | Lafayette, LAPosition Overview
We are seeking an experiencedAWS Application Security Analystto support application security initiatives within a large-scale financial services environment. This role will partner closely with software development, cloud, DevOps, and cybersecurity teams to identify, assess, and remediate security risks throughout the Software Development Lifecycle (SDLC) .The ideal candidate will have strong hands-on experience withapplication security testing, SAST, DAST, SCA, threat modeling, secure code review, DevSecOps, CI/CD security integration, AWS security, and container security .Responsibilities
Perform manual and automated application and source-code security reviews to identify vulnerabilities and security risks.
Conductthreat modelingand application security risk assessments for new and existing applications.
Work with development teams to determine appropriate remediation approaches for security findings.
UtilizeSAST, DAST, and Software Composition Analysis (SCA)tools for application security testing.
Integrate application security controls and automated security testing intoCI/CD pipelines.
Evaluate application security risks acrossAWS cloud and containerized environments.
Apply knowledge of secure coding practices, network protocols, encryption, authentication, and common application vulnerabilities.
Partner with development, DevOps, cloud, and cybersecurity teams to strengthen DevSecOps practicesthroughout the SDLC.
Develop security guidance, FAQs, standards, and reusable application security best practices for development teams.
Clearly communicate vulnerabilities, security risks, and remediation recommendations to technical stakeholders.
Required Qualifications:
5+ years of application security experienceand strong knowledge of secure software development practices.
Hands-on experience withSAST, DAST, and SCA tools.
Experience performingmanual code reviewsand application security assessments.
Strong experience withthreat modeling and security risk assessments.
Working knowledge ofAWS securityand securing applications deployed in AWS environments.
Experience with DevSecOpsand integrating security testing into CI/CD pipelines.
Experience with GitHub, Jenkins, or similar CI/CD platforms.
Understanding ofcontainer securityand associated application security risks.
Programming or code-review experience with Java, Python, JavaScript, C#, or similar languages.
Strong understanding of: Network protocols
Encryption
Authentication and authorization
Secure coding practices
Common application vulnerabilities Strong communication skills with the ability to explain security findings and remediation recommendations to developers and technical teams.
Preferred Qualifications:
Experience withinfinancial services, banking, or another highly regulated environment.
Relevant security or cloud certifications such as: AWS Certified Security – Specialty
CISSP
CSSLP
GIAC Application Security certifications EducationBachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field.
System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.
System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.
#M-#LI-Ref: #404-IT Pittsburgh
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.