What are the responsibilities and job description for the Application Security Analyst position at Ampcus, Inc?
Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team. Job Title: Application Security Analyst. Location: Plano, TX. What we're looking for
- We are seeking a skilled and proactive Application Security Analyst to integrate security practices into our DevOps processes. The ideal candidate will work closely with development and operations team to ensure secure software delivery pipelines, automate security controls, and foster a culture of shift left in the organization.
What you'll be doing
- Design, implement, and maintain secure CI/CD pipelines.
- Integrate security tools (SAST, DAST, SCA, etc.) into development workflows.
- Collaborate with development and operations teams to remediate vulnerabilities.
- Automate security testing and compliance checks.
- Monitor and respond to security incidents in cloud and container environments.
- Develop and enforce security policies, standards, and procedures.
- Stay current with emerging security threats and DevSecOps best practices.
Requirements:
Qualifications/ What you bring (Must Haves) - Highlight Top 3-5 skills:
Qualifications/ What you bring (Must Haves) - Highlight Top 3-5 skills:
- Bachelor's degree in computer science, Cybersecurity, or related field.
- 3 years of experience in DevOps, Security Engineering, or related roles. 2-3 years of security experience. Overall, 6 years.
- Strong understanding of CI/CD tools (e.g., Jenkins, Harness).
- Development knowledge on Java, Python, .Net, etc
- Experience with security tools (e.g., Veracode, GHAS, Orca).
- Proficiency in scripting languages (e.g., Python, Bash).
- Familiarity with containerization and orchestration (Docker, Kubernetes).
- Knowledge of cloud platforms (AWS, Azure, GCP) and their security features.
- Understanding of secure coding practices and application security principles.
- Knowledge of Infrastructure as Code (Terraform, Ansible).