Stellantis · 1 day ago
ICT Application Security Analyst
Auburn Hills, MI
Full-time
Onsite
Mid Level
3+ years expStellantis is seeking an ICT Application Security Analyst to work with the application development team in analyzing application code vulnerabilities and running security scans. The role involves implementing security controls in the software development life cycle and providing guidance to application teams on vulnerability mitigation.
AutomotiveIndustrial ManufacturingRetailTransportation
Responsibilities
Hands-on experience working with DevSecOps pipeline using CICD automation tools like Jenkins, TeamCity, GitLab, GitHub Action, Checkmarx, GitHub Advance Security, BurpSuite, and open-source tools
Implement Application Cyber Security Controls/Policies and standards developed by Application Security Program
Lead deployment of WAF for existing and new applications
Ability to demo security vulnerability to application teams
Drive application security issues to a resolution
Provide a clear guidance to application teams during vulnerability mitigation effort
Conduct application security assessment using standard Stellantis application security tools
Collect and report status on application security assessments including milestones, deliverables, timing, tasks, risk areas, and status
Categorize and recommend assessment strategies for existing and new application development
Coach development and supplier teams on application security
Develop user training material and conduct training sessions
Qualification
Required
Bachelor's degree in computer science, Technology or other related field
At least 3 years of application security analysis, testing and DevSecOps experience
Understanding of application architectures, development methodologies, and programming languages
Problem-solving skills and the ability to work both independently and as part of a team
Technical writing and communication skills to articulate security risks and findings to both technical and non-technical audiences
Hands on experience running SAST, DAST, IAST, SCA and Mobile scan
Knowledge of security and compliance frameworks like NIST and ISO
Understanding and experience in NIST SSDF or other secure software development frameworks
Knowledgeable in deployment of WAF tools such as Akamai, Cloudflare, Azure Front Door, and AWS WAF etc
Knowledge of the OWASP Top 10 and mitigation strategies for each
Knowledge on techniques of web attacks, DDoS attacks and BOT attacks and management/mitigation controls
Experienced with cloud platforms (AWS, Azure, GCP) and container frameworks
Knowledge of programming, scripting, and query languages such as Java, SQL, HTML, JavaScript
Preferred
Hands on experience reviewing application security secure code preferred in Java, C#, Python etc. popular programming languages
Prefer that candidates will have experience in scripting languages
Preferable is candidate has GIAC GWEB, ISC2 CSSLP, EC-Council CASE or other comparable professional certificates
Benefits
Comprehensive Health & Well-being Coverage
Family Building Benefit
Generous Paid Time Off
Competitive Retirement Savings Plans
Income Protection & Insurance Options
Company Vehicle Lease Program
Support for Your Growth and Giving Back
Company
Stellantis
Stellantis is an Franco-Italian-American automotive holding company that manufactures automobiles.
10001+ employees
H1B Sponsorship
Stellantis has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (2)
2024 (3)
2023 (2)
Funding
Current Stage
Public CompanyTotal Funding
$14.13B2021-07-23Post Ipo Debt· $14.13B
2021-01-18IPO
Leadership Team
Antonio Filosa
Chief Executive Officer
Christine Feuell
Chrysler and Alfa Romeo NA Brand CEO
Recent News
Business – Latest Financial & Stock Market News | New York Post
2026-02-07
Business News
2026-02-07
2026-02-07
Company data provided by crunchbase