Information Security Analyst – App Security

Job not on LinkedIn

🕒 August 25

🏈 Ohio – Remote

🏈 Ohio – Remote

⏰ Full Time

🟢 Junior

🔐 Security Analyst

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 39%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

BlueScope

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1928

🏭 Manufacturing

🏗️ Construction

Manufacturing • Sustainability • Construction

BlueScope is a global steel manufacturer committed to delivering sustainable and innovative solutions for its customers and communities. The company produces world-class steel products known for their durability, strength, and versatility across various industries and applications. BlueScope is dedicated to fostering sustainable practices that promote environmental responsibility, social engagement, and economic prosperity in their operations.

📋 Description

• Support cybersecurity operations across BlueScope North America • Participate in security monitoring, investigation, and incident response activities under the direction of senior security team members • Maintain operational documentation, procedures, metrics, and status reporting for cybersecurity activities • Monitor relevant security threats and vulnerabilities and escalate issues that may affect BlueScope operations • Support application security activities for BlueScope applications and development teams globally while operating primarily during U.S. business hours • Assist with security reviews for internally developed, externally developed, and third-party applications • Use SAST, DAST, SCA, API testing, and dependency scanning capabilities • Partner with development and technology teams to promote secure coding, security-by-design, and secure SDLC practices • Assist with application threat modeling, security requirements, and design reviews • Document application security findings, provide remediation guidance, and track findings through closure • Validate corrective actions and identify recurring issues addressable through standards, training, or automation • Assist with administration, configuration, and improvement of cybersecurity and application security tools • Support integration of security testing into development and CI/CD workflows • Use scripting or automation to improve repeatable security tasks, data collection, reporting, and workflow efficiency • Develop and maintain dashboards and metrics communicating security findings, remediation progress, and program performance • Support security activities aligned with BlueScope requirements and NIST Cybersecurity Framework, CIS Controls, ISO 27001, and OWASP guidance • Assist with internal and external audit requests involving cybersecurity and application security controls • Maintain records of security reviews, findings, remediation activities, exceptions, and risk decisions • Contribute to security standards, procedures, and technical guidance • Collaborate with application development, infrastructure, cloud, project, and business teams • Coordinate with global stakeholders across regions and time zones • Communicate security findings and recommended actions to technical and non-technical audiences • Support security awareness activities related to vulnerability management, secure development, and application security practices • Build technical knowledge through hands-on experience, training, and collaboration

🎯 Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline • 1-3 years of experience in cybersecurity, information security, application support, software development, systems administration, or a related technology field • Foundational understanding of cybersecurity principles, vulnerability management, risk management, and security controls • Familiarity with application security concepts, including secure coding practices, OWASP Top 10 risks, and the Software Development Lifecycle • Exposure to vulnerability assessment, application security testing, or security monitoring technologies • Basic understanding of cloud, web application, API, network, and operating system security concepts • Familiarity with a scripting or programming language such as PowerShell, Python, JavaScript, Java, or a similar language • Strong analytical, organizational, documentation, and problem-solving skills • Effective written and verbal communication skills and ability to collaborate with globally distributed teams • Ability to work primarily during U.S. business hours, with periodic schedule flexibility for global collaboration or critical security events • Internship or professional experience supporting cybersecurity, application development, DevOps, cloud, infrastructure, or vulnerability management activities • Familiarity with SAST, DAST, SCA, API security testing, dependency scanning, or penetration testing tools • Exposure to CI/CD pipelines, source code repositories, cloud platforms, containers, or modern application architectures • Knowledge of NIST, CIS Controls, ISO 27001, OWASP, or similar security frameworks and guidance • Entry-level or associate security certification such as Security+, SSCP, GSEC, Azure Security Engineer Associate, or a comparable credential • Experience working in a manufacturing, industrial, or globally distributed organization

🏖️ Benefits

• Health insurance • Life insurance • Short-term disability • Long-term disability • Paid time off • Retirement • Flexible working arrangements where possible and mutually agreed

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume