Application Security Analyst

Join Our Team!

Sunbelt Rentals strives to be the customer's first choice in the equipment rental industry. From pumps to scaffolding to general construction tools, we aim to be the only call needed to outfit a job site with the proper equipment. Not only do we offer a vast fleet that ranks among the best in the industry, we pair it all with a friendly and knowledgeable staff. Our employees are our greatest asset, and although we present a comprehensive equipment offering, our expertise and service are what truly distinguish us from the competition.

We pride ourselves on investing in our workforce and offer competitive benefits, as well as extensive on-the-job training for all eligible employees.

As a highly successful national company, we are constantly looking for talented individuals to support our growth. If you are interested in pursuing a rewarding career, we invite you to review our opportunities!

Job Description Summary

Position Objective:

We are seeking a Application Security Analyst to join our security team with focus on application security and vulnerability management. The ideal candidate will have knowledge of standards and practices for securing applications and APIs. This role will participate in efforts to identify, verify, report, and track vulnerabilities within Sunbelt Rentals systems and applications. This role spans multiple domains, including desktop, mobile, web applications, and API infrastructure.

Position Responsibilities:

• Schedule and perform regular application tests.
• Conduct penetration tests on important software and systems.
• Test changes before they go live.
• Analyze and validate vulnerabilities.
• Track and report testing activities.
• Present findings to stakeholders.
• Maintain dashboards for vulnerabilities.
• Improve asset management processes.
• Enhance threat modeling.
• Review source code and identify duplicates.
• Use security testing tools (e.g., Veracode, Burp Suite).
• Automate security scans and integrate with CI/CD pipelines.
• Collaborate with developers to improve security practices.
• Support incident response and investigations.
• Perform various security tests (penetration, purple team, red team).

Requirements:

Education & Experience:

• Degree in Computer Science or related field.
• Minimum 2 - 5 years of IT experience
• Self-starter, able to work independently and in teams.

Technical Skills:

• Strong understanding of internet architecture.
• Skilled in security testing (SAST, DAST, SCA, OWASP Top 10).
• Ability to verify vulnerabilities and manual testing.
• Familiar with security platforms (Checkmarx, AppScan, Fortify, Veracode, etc.).
• Experience with web services, JSON, and API testing.
• Conducting vulnerability assessments and communicating security issues.
• Proficient in programming (.NET, C, C#, Java, Python).
• Knowledge of OOP concepts and JavaScript (Node, React).
• 1-3 years of web development experience (HTML, ASP, ColdFusion, JSP, Node.js, React).
• Knowledge of pipeline integration and source code management (Jenkins, GitHub, etc.).
• knowledge of relational databases (SQL Server, MySQL).
• Ability to write and understand SQL.
• Basic knowledge of Azure.

Additional Skills:

• Experience with ServiceNow
• Threat modeling in SDLC
• Knowledge of cloud computing and DevOps tools (Azure DevOps, Kubernetes, Docker, Chef)
• Experience with cloud platforms (AWS, Google, Azure) and cloud security (Wiz, Prisma Cloud).
• Machine learning experience
• Experience with RPGLE, RPG-FREE application development

Physical Demands:

Must be able to bend, squat, crouch and/or reach and lift up to 25 pounds or more, as required by the job.  Some Sunbelt jobs may require driving for long periods of time, loading and unloading heavy equipment, performing work in extreme weather conditions including rain, wind, or excessive temperatures and/or night and weekend work.  All duties must be performed according to Sunbelt’s safety policies and guidelines.  Reasonable accommodations may be made to comply with ADA/ADAAA.

The above description covers the principal duties and responsibilities of the job.  The description shall not, however, be construed as a complete listing of all miscellaneous, incidental or similar duties which may be required from day to day.

Sunbelt Rentals is an Equal Opportunity Employer — Minority/