Application Security Analyst

Overview In this role you will strengthen EMCOR’s security program by integrating AppSec tools into CI/CD pipelines and managing vulnerabilities. You’ll partner with development teams to embed security into their practices and help mature the DevSecOps culture. You will work across cloud platforms to reduce the attack surface and support secure infrastructure as code initiatives. This is a hands-on, cross-functional role that drives security in a large, remote-enabled organization. Compensation / Benefitsmedical, dental, and vision coveragehealth savings account and flexible spending accountslife insurance and disability401(k) Savings PlanCollege Coachemployee assistance program ResponsibilitiesSupport and monitor the enterprise information security system and manage daily operations for Application Security productsResolve security incidents and document findings to improve protocolsMaintain and upgrade application security platforms and tune policiesIntegrate security tools (SAST, DAST) into CI/CD pipelines and workloadsReview Terraform configurations and reusable modules for security and cloud architecture alignmentMonitor code platforms for security threats and respond to incidents and findingsWrite SIEM queries and analyze results to support remediationConfigure and manage Web Application Firewalls (WAFs) and tune rulesetsContribute to security-related projects and initiatives; perform special projects as needed Key requirements3+ years in Application Security/DevOps/DevSecOpsExperience with cloud platforms (Azure, AWS, GCP, OCI)CI/CD and developer workflow automation (GitHub Actions, Azure DevOps Pipelines)Terraform used to deploy Azure infrastructure, including modulesExperience managing WAF policies for Azure Front DoorTriage and remediate GHAS or Microsoft Defender for Cloud findings (CodeQL, Secret Scanning, Dependency Review)PowerShell proficiency for administration and automationStrong communication and professional interaction at all organizational levelsStrong project management capabilitiesCustomer service orientationeffective communicationproject managementcustomer service orientationAppSec tooling (SAST, DAST)CI/CD automationTerraform for Azure infrastructure