Senior Lead, Application Security Analyst

The Lead, Application Security Analyst delivers senior, hands-on application security expertise to help developers and technology teams interpret, assess, and address application security findings. This hybrid role is based in Tempe, AZ and emphasizes remediation support, evidence-based validation, and reusable security guidance.

Key Responsibilities

• Review complex Application Security findings and supporting technical evidence to determine security relevance and the appropriate treatment path.
• Partner with developers to explain vulnerabilities and provide practical remediation guidance.
• Assess false-positive claims, compensating conditions, and alternative technical explanations using evidence-based effective challenge.
• Validate remediation work and support technically defensible finding closure.
• Act as an escalation point for difficult Application Security questions while mentoring other practitioners and developing reusable technical guidance.

Requirements

• Hands-on experience in an application-focused security discipline such as Application Security, product security, secure software engineering, DevSecOps security, penetration testing, vulnerability assessment, or a comparable area.
• Experience analyzing application vulnerabilities, security findings, source code, software behavior, or related technical evidence.
• Experience working directly with software developers or engineering teams to communicate security issues and support remediation decisions.

Preferred Qualifications

• Experience with static analysis, software-composition analysis, secret scanning, penetration-testing results, or comparable Application Security capabilities.
• Experience delivering technical security guidance, including false-positive analysis, finding validation, and effective challenge in an enterprise software-development environment.
• Experience mentoring security practitioners or developing reusable security guidance, standards, or analysis patterns.

Education and Experience

• Minimum of 6 years of relevant experience.
• Bachelor’s degree in computer science, engineering, information systems, cybersecurity, or a related discipline, or an equivalent qualification.

Location and Work Model

Tempe, AZ (hybrid)

Salary Range

USD 108,775 - 184,965 per year

Benefits

• Retirement benefits (401k and pension)
• Health and welfare benefits (medical, dental, vision, spending accounts and disability)
• Paid time off
• Parental and caregiver leave
• Life and accident insurance
• Discretionary bonus program (may include an equity component)
• Other voluntary and well-being benefits

Work Authorization

Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Northern Trust will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa).

Reasonable Accommodation

Northern Trust is committed to working with and providing adjustments to individuals with health conditions and disabilities. If a reasonable accommodation is needed for any part of the employment process, email [email protected], or discuss the requirements with the recruiter you are working with.