Application Security Senior Analyst

Salary: $120,000 - 160,000 per year Requirements: At least five years of related experience in application security, secure code review, or software engineering with a security focus. Strong knowledge of secure coding principles, common application security vulnerabilities, including the OWASP Top 10, and secure software development practices. Understanding of modern software architectures, APIs, cloud-native applications, and CI/CD pipelines. Experience reviewing code in Java, C#, Python, JavaScript/TypeScript, Go, or similar languages. Experience with SAST tools such as Checkmarx, Fortify, Veracode, Semgrep, or SonarQube, and familiarity with secure SDLC and DevSecOps practices. Hands-on experience using generative AI or AI-assisted developer or security tools in engineering, code review, security testing, or DevSecOps workflows. Ability to communicate security findings and remediation guidance to developers and technical leaders. An undergraduate degree in a related field, or an equivalent combination of training and experience. We especially value experience developing prompts, workflows, agents, or automations; applying LLMs to security analysis, code review, vulnerability triage, or secure development; understanding LLM security risks and AI application attack vectors; and reviewing applications that use machine learning, generative AI, agentic AI, or AI-enabled business processes. We are not offering visa sponsorship for this position. Responsibilities: Conduct manual and AI-assisted secure code reviews across modern application stacks to identify vulnerabilities, logic flaws, and insecure coding practices. Develop and refine prompts, workflows, and review methods to make AI-assisted code reviews more effective and repeatable. Validate and improve vulnerability findings, reducing false positives and uncovering overlooked risks. Prepare clear technical reports and risk-based recommendations. Work with development teams to explain findings, assess risks, and provide practical remediation guidance. Collaborate with penetration testers, threat modelers, and application security teams. Contribute to team processes, review methods, and automation initiatives. Technologies: Agentic AI AI C# CI/CD Cloud DevSecOps Support Java JavaScript LLM Machine Learning OWASP Python Security TypeScript More: We are Vanguard, collaborating with hackajob to connect exceptional professionals with this opportunity on our Threat Modeling & Validation team. Our mission is to support clients long-term financial wellbeing and deliver products and services that make a meaningful difference in their lives. We are committed to learning and developing as individuals and as a team, and our mission guides our work from Malvern to Melbourne. We use a hybrid working model for most crew members, balancing flexibility with in-person learning, collaboration, and connection. We believe our collaborative, mission-driven culture supports long-term client outcomes and a positive employee experience. last updated 40 week of 2026