Information Security Analyst Senior or Lead- Application Security

Progressive offers a remote, US based opportunity for an experienced information security professional focused on application security. The role emphasizes hands on security testing, code reviews to uncover vulnerabilities, and driving security improvements in design and implementation. You will serve as a subject matter expert on enterprise project teams, providing purposeful information security guidance and ensuring approved security requirements are implemented. This position is fully remote for US based colleagues.

Benefits and culture

• 401(k) with dollar for dollar company matching up to 6%
• Medical, dental & vision coverage, including free preventive care
• Wellness and mental health programs
• Flexible spending accounts and health savings accounts, plus life insurance
• Paid time off including volunteer time off
• Paid and eligible unpaid sick leave, plus short and long term disability
• Parental and family leave; military leave and pay
• Diverse, inclusive and welcoming culture with Employee Resource Groups
• Career development opportunities and tuition assistance
• Onsite gym and healthcare services at larger locations

Responsibilities

• Perform security testing activities
• Review application code to identify vulnerabilities
• Identify security improvement opportunities in design or implementation
• Report findings to stakeholders
• Serve as the application security SME on enterprise projects
• Provide information security consulting
• Ensure the implementation of approved security requirements
• Define functional requirements
• Collaborate with development teams
• Conduct associated testing
• Advocate for security enhancements across the enterprise
• Foster and develop security champions on application teams

Requirements

• A minimum of eight years related work experience
• Bachelor's degree and a minimum of five years of relevant work experience
• Master's degree or higher and a minimum of three years of relevant work experience

Technologies

• Burp Suite
• OWASP ZAP
• Fiddler
• Postman
• PowerShell
• Python
• Security Assertion Markup Language (SAML)

Compensation

• Salary: USD 107,550 - 146,900 per year
• Gainshare bonus up to 30% or 40% of eligible earnings based on company performance and position level