Application Security Analyst

Consumers Credit Union, Illinois is seeking an Application Security Analyst to help protect application systems and strengthen the organization’s application security program. In this hybrid role based in Lake Forest, IL, you will partner with engineering teams across the Software Development Lifecycle (SDLC) to test, remediate, and improve application-layer security.

Key Responsibilities

• Conduct static and dynamic application security testing (SAST/DAST) using tools such as Veracode, Checkmarx, or Burp Suite.
• Find, analyze, and prioritize vulnerabilities, then collaborate with developers to support timely and effective remediation.
• Configure and optimize Web Application Firewall (WAF) rules and monitor logs to detect and mitigate threats.
• Participate in secure design reviews, threat modeling, and architecture assessments.
• Support API security, including authentication methods like OAuth and API keys, along with secure data handling practices.
• Track remediation across teams, validate fixes, and document vulnerability closure.
• Maintain clear, current documentation on AppSec processes, tools, and standards.
• Stay current on OWASP Top 10, SANS CWE Top 25, and emerging application-layer threats.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field (preferred).
• 2+ years of experience in application security or software development with security responsibilities, or 4+ years in lieu of education.
• Certifications in CSSLP, CASE, or GWEB (preferred).
• 2 years of experience performing SAST and DAST.
• Strong understanding of secure coding practices and how to integrate security into the SDLC.
• Hands-on experience with application security tools and vulnerability management, including Veracode, Checkmarx, or Burp Suite.
• Ability to convert technical findings into actionable guidance for developers.
• Curiosity and commitment to staying ahead of evolving cyber threats.
• Strong communication and collaboration skills.

Technologies

• Veracode, Checkmarx, Burp Suite
• SAST, DAST
• Web Application Firewall (WAF)
• OAuth, API keys
• OWASP Top 10, SANS CWE Top 25
• Software Development Lifecycle (SDLC)

Location and Schedule

• Hybrid schedule with 3 days/week at the corporate office in Lake Forest, IL.
• Flexibility to be assigned an on-call schedule approximately once every 6 weeks.
• Local Northern IL/Southeast WI candidates only.

Compensation

• Annual salary range: $67,980 to $108,768.
• Eligible for an annual bonus opportunity.
• Salary offers consider skill sets, experience and training, licensure and certifications, and other business and organizational needs.
• It is not typical for an individual to be hired at or near the top of the salary range; compensation depends on the facts and circumstances of each case.

Benefits

• Medical (High Deductible, HMO and PPO)
• Dental
• Vision
• Spending accounts
• Short-term disability
• Long-term disability
• Life insurance
• 401(k) savings plan eligible at any time
• Automatically enrolled in the pension plan following six months of employment and 1,000 hours of service and reaching age 20
• Annual bonus opportunity (eligible)