Sr. Associate II – Application Security Analyst

Who We Are

At Corebridge Financial, we believe action is everything. That’s why every day we partner with financial professionals and institutions to make it possible for more people to take action in their financial lives, for today and tomorrow.

We align to a set of Values that are the core pillars that define our culture and help bring our brand purpose to life:

• We are stronger as one: We collaborate across the enterprise, scale what works and act   decisively for our customers and partners.
• We deliver on commitments: We are accountable, empower each other and go above and beyond for our stakeholders.
• We learn, improve and innovate: We get better each day by challenging the status quo and equipping ourselves for the future.
• We are inclusive: We embrace different perspectives, enabling our colleagues to make an impact and bring their whole selves to work.

Who We Are

At Corebridge Financial, we believe action is everything. That’s why every day we partner with financial professionals and institutions to make it possible for more people to take action in their financial lives, for today and tomorrow.

We align to a set of Values that are the core pillars that define our culture and help bring our brand purpose to life:

• We are stronger as one: We collaborate across the enterprise, scale what works and act decisively for our customers and partners
• We deliver on commitments: We are accountable, empower each other and go above and beyond for our stakeholders
• We learn, improve and innovate: We get better each day by challenging the status quo and equipping ourselves for the future
• We are inclusive: We embrace different perspectives, enabling our colleagues to make an impact and bring their whole selves to work

Who You’ll Work With

The Information Technology organization is the technological foundation of our business and works in collaboration with our partners from across the company. The team drives technology and digital transformation, partners with business leaders to design and execute new strategies through IT and operations services and ensures the necessary IT risk management and security measures are in place and aligned with enterprise architecture standards and principles. 

About The Role

The Associate II - Application Security Analyst will provide operational management of application security assessment tools and services. This role will review and confirm all applications are compliant with relevant security policies, standards and regulatory requirements.  In addition, this role will identify, recommend, and implement enhancement to application security workflows, documentation, and tooling.

Responsibilities

• Assist in operational management of application security assessment tools and services.  
• Act as a liaison between security and business teams to ensure clear communication of security requirements and issues.  
• Ensure applications comply with relevant security policies, standards, and regulatory requirements via the Software Security Assessment program. 
• Identify and recommend enhancements to application security workflows, documentation, and tooling to improve efficiency and effectiveness.  
• Design and maintain dashboards and generate reports that provide visibility into the state of application security and risk trends.  
• Manage the end-to-end lifecycle of software security assessment ensuring timely completion and accuracy.  
• Provide guidance to the assessment team and create reports on metrics to track team efficiency and progress. 

Skills and Qualifications

• Understanding of application security fundamentals and secure development practices.  
• Exposure to security tools such as Veracode or similar SAST/DAST/SCA platforms.  
• Familiarity with Agile, SDLC, DevSecOps principles, including how security integrates into continuous integration/continuous deployment (CI/CD) pipelines. 
• Ability to identify, evaluate and recommend solutions for security-related risks and gaps. 
• Capable of translating technical details into actionable insights for both technical and non-technical audiences.  
• Comfortable working across cross-functional teams and engaging with developers, business analysts, and senior stakeholders.  
• Bachelors degree in Computer Science, Information Security or related discipline (or equivalent experience). 
• High-level understanding of various types of security controls such as WAF, MFA, SSO, Firewall