Archer Platform / Application Security Analyst, Cybersecurity Engineering & Operations

Archer Platform / Application Security Analyst, Cybersecurity Engineering & Operations 

Location: Remote - United States

Archer is a technology company that provides Integrated Risk Management software solutions to other organizations. The Archer Platform provides a common foundation for organizations to manage IT security risk, regulatory compliance, third party/supply chain risk, and more. Non-technical users can automate processes, streamline workflow, control user access, tailor the user interface, and report in real-time using the point-and click interface to build and manage business applications. Archer has been the leading risk management software platform for over 20 years, including acquisitions by RSA, Dell, Symphony Technology Group, and Cinven who recently launched Archer as an independent business unit. https://www.archerirm.com/

Archer is seeking a Platform/Application Security Analyst to support our cybersecurity team. This role is ideal for candidates with knowledge in cybersecurity operations and code development who are looking to grow their technical and analytical skills in a collaborative, fast-paced environment. The individual will support the day-to-day work of Archer's Platform and Application Security team. Under guidance from management, this role involves analyzing and making security recommendations for internal software development based on current cybersecurity trends, maintaining tools and processes, and assisting in identifying effective security solutions. The ideal candidate is a detail-oriented, curious, and effective at establishing cross functional team collaboration to maintain and improve the overall security of our platform and products. 

Principal Responsibilities:

• Possess strong skills as an application developer with a security focus for SAAS cloud platforms and on-prem software solutions
• Develop cybersecurity operations trend analysis and report the results from security tooling such as SAST and DAST.
• Works on cybersecurity problems such as penetration test results, secure application development guidance, and the ability to analyze security related tasks and issues.
• Assists in selecting methods and techniques for identifying and advocating effective security solutions
• Develops and maintains detailed documentation to support cybersecurity programs
• Selects methods and techniques for identifying and advocating effective security solutions
• Maintains and optimizes tools, processes, documentation, reporting, and technologies, and defines success criteria for their effective usage
• Participates in review meetings while leveraging available tools and development technologies/techniques to provide appropriate security guidance
• Acts as the bridge between technical and non-technical contributors in cybersecurity discussions
• Successfully prioritizes own work while being flexible in the types of security issues that may arise and require analysis and guidance.
• Works independently, and proactively identifies complex problems and implements solutions to those problems
• Acts as a subject matter expert and local leader for cybersecurity issues; contributes directly to the development of strategy, policy, standards, and procedures
• Partners with senior management inside and outside of the organization
• Participates in reviews of available tools, technologies, and processes to secure all aspects the enterprise
• Leads cross-functional teams in support of global security operations projects and programs
• Develops solutions to complex problems which may have no precedent, with particular emphasis on security operations
• Serves as an advisor to senior executives both internal and external for all aspects of security operations
• Conducts or participates in ongoing assessments of emerging security operations technologies
• Provides security thought leadership and recommendations based on knowledge of emerging threats and trends

Skills:

• Secure Coding Practices
• Understanding of OWASP Top 10 (e.g., SQLi, XSS, CSRF, SSRF).
• Knowledge of secure development.
• Application Security Testing
• SAST (Static Application Security Testing) – Tools like SonarQube, Checkmarx, Fortify.
• DAST (Dynamic Application Security Testing) – Tools like Burp Suite, OWASP ZAP, Nessus.
• SCA (Software Composition Analysis) – Tools like Snyk, Dependency-Check.
• Cloud & Platform Security
• AWS/Azure/GCP security best practices (IAM, CSPM, KMS, WAF).
• Container security (Docker, Kubernete