Application Security Analyst

PlanetArt

. Manage vulnerabilities identified through SAST, DAST, and other application security tools .

Posted 10/27/2026full-timeWoodridge • Illinois • United StatesMid-LevelSenior💰 $80,000 - $120,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application security and vulnerability management, with a strong focus on SAST, DAST, and AI-assisted security tools. Proficient in secure coding practices, threat intelligence, and compliance frameworks, ensuring effective collaboration with development teams and external researchers.

Highest-signal resume keywords

Application Security ManagementVulnerability ManagementSAST/DAST Tools (Snyk, Semgrep)Generative AI Tools ExperienceThreat Intelligence Research

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Application SecurityVulnerability ManagementSAST ToolsDAST ToolsSecure Coding PracticesThreat IntelligenceAI-Assisted Security ToolsInput ValidationOutput ValidationData Protection

Soft Skills

Strong Communication SkillsCollaborationTeam Interaction

Tools & Technologies

SnykSemgrepAWSGCPAzureBug Bounty PlatformsAI Tools

Certifications & Qualifications

GWAPTOSWEGWEBCEHCISSP

Industry Keywords

OWASP Top 10CWEGRC FrameworksNIST CSFISO 27001SOC 2Incident Response WorkflowsCoordinated Vulnerability Disclosure

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud Platform

About the role

Key responsibilities & impact

Manage vulnerabilities identified through SAST, DAST, and other application security tools
Validate, prioritize, and assign vulnerabilities to Application Development teams; track remediation and verify closure
Oversee the Bug Bounty program, including triage, validation, and coordination with AppDev and external researchers
Conduct threat intelligence research to identify risks to applications and the broader organization
Support MSSP-provided security notifications through validation, triage, and issue assignment
Collaborate with AppDev to improve secure coding practices and provide remediation guidance
Use approved AI tools for vulnerability triage, code review, threat research, and remediation guidance; independently validate outputs
Review AI-generated code and AI-assisted development workflows for security weaknesses
Assess AI-enabled applications and integrations for prompt injection, sensitive data exposure, insecure output handling, and excessive permissions
Follow company AI-use policies and protect source code, credentials, and confidential data
Contribute to guidance for evaluating AI tools and third-party AI services
Contribute to GRC initiatives, audits, and compliance efforts
Support cloud security initiatives and third-party risk management reviews
Work onsite three days per week and remotely two days per week
Interact with team members in person, by phone, WebEx, Slack, or email
May require occasional travel

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Cybersecurity, or equivalent experience
3–5 years of experience in application security, vulnerability management, or related role
Hands-on experience with SAST/DAST tools; Snyk required and Semgrep preferred
Knowledge of OWASP Top 10, CWE, and secure development practices
Practical experience using generative AI tools or AI-assisted security and development tools, including writing effective prompts, verifying outputs, and recognizing inaccurate or unsupported results
Working knowledge of large language models (LLMs), common AI application security risks, input and output validation, access restrictions, and sensitive-data protection
Ability to evaluate AI-generated code and security recommendations using manual review and established testing tools
Understanding of responsible AI use and data-handling requirements
Familiarity with bug bounty platforms and coordinated vulnerability disclosure processes
Understanding of threat intelligence processes and incident response workflows
Strong written and verbal communication skills and ability to collaborate across technical and business teams
Candidates must be local to or willing to relocate to the office area
Preferred: experience with AWS, GCP, Azure, GRC frameworks (NIST CSF, ISO 27001, SOC 2), and certifications such as GWAPT, OSWE, GWEB, CEH, or CISSP
Preferred: familiarity with security testing of LLM applications, RAG, AI agents, or AI service integrations

Benefits

Comp & perks

Health, Dental, and Vision Insurance
Life Insurance
401(k) with matching
Paid Time Off
Sick Days
Paid Holidays
Floating Holidays
Employee Product Discounts