[Hiring] Application Security Analyst @DHL eCommerce

Role Description

The Application Security Analyst is responsible for ensuring the security of homegrown and 3rd party applications. The role emphasizes analytical and advisory responsibilities rather than hands-on implementation, supporting secure architecture practices, overseeing the security posture of applications (including cloud and AI solutions), and providing transparency to IT management through status reporting and risk insights.

• Assess and advise on security architecture and configuration of systems, applications, and infrastructure.
• Collaborate with the DevSecOps team on state-of-the-art procedures.
• Independently assess the results of security test reports like static code analysis, dynamic application analysis, and penetration testing.
• Support development teams with the mitigation of findings.
• Work within a fast-paced, agile environment collaborating with business and technology teams across the Americas region to implement and support next generation security solutions.

Qualifications

• Knowledge of OWASP Top 10 and ASVS frameworks including best practice implementations.
• Experience with cloud security and AI security standards (e.g. ISO 27017, CSA CCM, NIST AI RMF, ISO 42001) and best practices.
• Ability to interpret different coding languages including Python, Java, ReAct, and JavaScript as well as further widespread languages.
• Excellent organizational and analytical skills.
• Ability to analyze data, draw conclusions, interpret results, and make recommendations with respect to various IT systems.
• Ability to communicate effectively with all levels of management.
• Ability to work effectively in a global environment, including awareness of and sensitivity to cultural differences.
• Ability to produce high quality work under pressure or tight deadlines.
• Good written, oral, and interpersonal communication skills.
• Strong Microsoft Office skills (Word, Excel, PowerPoint).
• Strong attention to detail.
• Ability to multi-task.

Requirements

• Bachelor’s degree in information technology, or related field of study preferred.
• 3+ years of experience required in application security, DevSecOps, or security architecture.
• Experience with best practices and tools in API security, container security, modern identity frameworks, and supply chain security.
• Knowledge of most common SAST, DAST, and penetration testing tools and procedures.
• Experience with CVSS, risk management, and GRC tools.
• Experience and knowledge of Microsoft Office (Word, Excel, PowerPoint).
• Process automation experience preferred.
• Experience working with a global organization and/or interacting with colleagues in foreign jurisdictions.
• Security certifications such as CISSP, CISA, CEH, OSCP, or CCSP are preferred.

Benefits

• Competitive Pay
• Bonus Programs
• Retirement Savings - 401k with company match
• Medical, Dental, Vision, Well-being programs
• FSA/HSA availability
• Tuition Reimbursement
• Paid Time Off including vacation and sick time
• Company Paid Holidays and Floating Holidays
• Paid Parental Leave
• Employee Discount Program
• Employee Assistance & Work Life Program
• Short Term and Long-Term Disability
• Life Insurance