Application Security Analyst

Salary: $120,000 - 160,000 per year Requirements: At least 3 years of related experience in application security, secure code review, or software engineering with a security focus. Understanding of secure coding principles, common application vulnerabilities including the OWASP Top 10, and secure software development practices. Familiarity with modern software architectures, APIs, cloud-native applications, and CI/CD pipelines. Familiarity with Java, C#, Python, JavaScript/TypeScript, Go, or similar programming languages. Familiarity with SAST tools such as Checkmarx, Fortify, Veracode, Semgrep, or SonarQube, and with secure SDLC and DevSecOps practices. Familiarity with generative AI or AI-assisted tools used in software development, code review, or security testing. Ability to communicate security findings and remediation guidance to developers and technical teams. Undergraduate degree in a related field, or an equivalent combination of training and experience. Preferred: Experience creating prompts, workflows, agents, or automations. Preferred: Familiarity with LLM security risks, including prompt injection, insecure code generation, model misuse, and AI application attack vectors. Preferred: Familiarity with applications using machine learning, generative AI, agentic AI, or AI-enabled business processes. We do not offer visa sponsorship for this position. Responsibilities: Perform manual and AI-assisted secure code reviews across modern application stacks to identify vulnerabilities, logic flaws, and insecure coding practices. Use established prompts, workflows, and methodologies for AI-assisted code reviews. Review and validate findings from automated and AI-assisted analysis. Prepare clear technical reports and risk-based recommendations. Communicate findings to development teams and support remediation efforts. Collaborate with penetration testers, threat modelers, and application security teams. Contribute to team processes, methodologies, and automation initiatives. Technologies: Agentic AI AI C# CI/CD Cloud DevSecOps Support Java JavaScript LLM Machine Learning OWASP Python Security TypeScript More: We are collaborating with hackajob to connect exceptional professionals with Vanguard for a Secure Code Reviewer position on our Threat Modeling & Validation team. The role focuses on reviewing internally developed applications and services, identifying and validating security vulnerabilities, and helping developers address them early in the software development lifecycle through a combination of manual review and AI analysis. Our mission is to support clients long-term financial wellbeing and provide products and services that can transform their lives. We encourage learning and development as individuals and as a team. Most of our crew members work in a hybrid model designed to balance flexibility with in-person learning, collaboration, and connection. We believe our mission-driven, collaborative culture supports long-term client outcomes and a positive employee experience. last updated 40 week of 2026