AWS Application Security Analyst

System One is seeking an AWS Application Security Analyst to support application security initiatives within a large-scale financial services environment. This hybrid role in Lafayette, LA centers on identifying, assessing, and remediating security risks across the software development lifecycle, while collaborating closely with development, cloud, DevOps, and cybersecurity teams.

In this position, you will help strengthen DevSecOps practices by performing security reviews, applying threat modeling, and driving the integration of automated security testing into modern CI/CD workflows. You will also provide clear security guidance and recommendations to technical stakeholders to reduce risk across AWS and containerized deployments.

Responsibilities

• Perform manual and automated application and source-code security reviews to identify vulnerabilities and security risks.
• Conduct threat modeling and application security risk assessments for both new and existing applications.
• Partner with development teams to determine appropriate remediation approaches for security findings.
• Use SAST, DAST, and Software Composition Analysis (SCA) tools for application security testing.
• Integrate application security controls and automated security testing into CI/CD pipelines.
• Evaluate application security risks across AWS cloud and containerized environments.
• Apply secure coding knowledge across areas including network protocols, encryption, authentication, and common application vulnerabilities.
• Collaborate with development, DevOps, cloud, and cybersecurity teams to strengthen DevSecOps practices across the SDLC.
• Develop security guidance such as FAQs, standards, and reusable best practices for development teams.
• Communicate vulnerabilities, security risks, and remediation recommendations clearly to technical stakeholders.

Requirements

• 5+ years of application security experience and strong knowledge of secure software development practices.
• Hands-on experience with SAST, DAST, and SCA tools.
• Experience performing manual code reviews and application security assessments.
• Strong experience with threat modeling and security risk assessments.
• Working knowledge of AWS security and securing applications deployed in AWS environments.
• Experience with DevSecOps and integrating security testing into CI/CD pipelines.
• Experience with GitHub, Jenkins, or similar CI/CD platforms.
• Understanding of container security and related application security risks.
• Programming or code-review experience with Java, Python, JavaScript, C#, or similar languages.
• Strong understanding of network protocols, encryption, authentication, and authorization.
• Strong understanding of secure coding practices and common application vulnerabilities.
• Strong communication skills, including the ability to explain security findings and remediation recommendations to developers and technical teams.
• Experience in financial services, banking, or another highly regulated environment.

Additional Information

• Location: Lafayette, LA (hybrid)
• Salary: USD 100,000 per year
• Education: Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field

Technologies

• AWS, SAST, DAST, Software Composition Analysis (SCA)
• CI/CD pipelines, DevSecOps
• Container security, GitHub, Jenkins
• Java, Python, JavaScript, C#
• Threat modeling, SDLC, network protocols, encryption, authentication, authorization

Benefits

• Health and welfare benefits coverage options including medical, dental, and vision
• Spending accounts
• Life insurance
• Voluntary plans
• Participation in a 401(k) plan

Preferred Qualifications

• Experience within financial services, banking, or another highly regulated environment
• Relevant security or cloud certifications such as AWS Certified Security – Specialty, CISSP, CSSLP, or GIAC Application Security certifications