# Application Security Analyst

**Company**: Barclays
**Location**: Whippany, Jefferson Park
**Experience**: senior
**Job type**: full-time
**Salary**: $125,000 - $170,000
**Category**: Security
**Industry**: Finance

**Apply**: https://barclays.wd3.myworkdayjobs.com/en-US/External_Career_Site_Barclays/job/Building-400-Whippany-Campus-Jefferson-Park/Application-Security-Specialist_JR-0000096029?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_58cc51df-70f

## Description

We are seeking an Application Security Analyst to support the delivery and continuous enhancement of Application Security and DevSecOps capabilities. As an Application Security Analyst, you will evaluate security findings, validate risk, support remediation, and convert testing data into practical insights for engineering and security stakeholders.

Responsibilities:

- Development and execution of assessments, audits, and threat models to identify vulnerabilities within the bank's systems, applications, and servers using penetration tools and techniques

- Collaboration with stakeholders and IT teams to identify emerging cyber-attack techniques, tools, and technologies

- Development and maintenance of comprehensive documents and reports for senior stakeholders on penetration test findings and remediation guidance

- Collaboration with stakeholders to understand their security requirements and controls in business processes, application/services

- Identification of emerging vulnerabilities, exploit codes, and cyber-attacks to develop testing methodologies and assurance activities

As an Assistant Vice President, you will be expected to:

- Advise and influence decision-making, contribute to policy development, and take responsibility for operational effectiveness

- Lead a team performing complex tasks, using well-developed professional knowledge and skills to deliver on work that impacts the whole business function

- Collaborate closely with other functions/business divisions

Requirements:

- Experience with running one or more of SAST, SCA, or DAST scans; triaging and validating findings; investigating false positives; assessing severity and exploitability

- Knowledge of cyber governance, security policies, controls, and standards

- Understanding of secure SDLC practices, software supply chain security, dependency risk, secrets scanning, SBOMs, vulnerability management, and developer-focused remediation

Benefits:

- Medical, dental, and vision coverage

- 401(k)

- Life insurance

- Paid leave for qualifying circumstances

- Eligibility for an incentive award

## Skills

### Required
- SAST
- SCA
- DAST
- API security
- secure coding
- cyber governance

### Nice to have
- AI-assisted security testing
- software supply chain security
- dependency risk
- secrets scanning
- SBOMs
- vulnerability management

---

Source: [Apply at barclays.wd3.myworkdayjobs.com](https://barclays.wd3.myworkdayjobs.com/en-US/External_Career_Site_Barclays/job/Building-400-Whippany-Campus-Jefferson-Park/Application-Security-Specialist_JR-0000096029?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)
