Application Security Analyst

About the role

TradeStation is seeking a Security Analyst to join its Application Security team. The analyst will help protect the company’s application assets by conducting regular security assessments, collaborating with engineering teams, and maintaining security documentation.

Key responsibilities

• Perform periodic security assessments using SAST, DAST, SCA, IaC scanning, and other methodologies.
• Analyze and validate security test findings, communicate results to developers, managers, and product owners, and track remediation.
• Review, update, and develop security policies, standards, and related documentation.
• Create metrics, dashboards, and analytics for executive audiences using SQL, Excel, and PowerBI.
• Support Material Business Initiative (MBI) security reviews throughout the development lifecycle.
• Integrate security scanning and policy gating into CI/CD pipelines (GitLab CI, GitHub Actions).
• Design, build, and maintain security automation tools and scripts (Python, JavaScript) to reduce manual effort.
• Stay current on compliance frameworks (NIST, Cobit, PCI, SOX, GDPR) and recommend improvements.
• Assist with configuration, installation, and administration of security tools.

Required profile

• Experience conducting application security assessments and working closely with engineering teams.
• Strong analytical skills to interpret security findings and drive remediation.
• Ability to produce clear documentation and executive‑level reporting.
• Familiarity with compliance standards and best‑practice security processes.

Required skills

• SAST, DAST, SCA, IaC scanning tools
• SQL
• Excel (pivot tables, data functions)
• PowerBI
• CI/CD platforms: GitLab CI, GitHub Actions
• Python
• JavaScript
• Knowledge of NIST, Cobit, PCI, SOX, GDPR