DescriptionApplication Security Analyst* U.S. citizenship is required for this position due to Department of Defense restrictions. *Role Summary:The Application Security Analyst helps improve and maintain the WPS application security program by serving and providing experienced guidance pertaining to secure web development design and testing. The resource will partner with DevOps, Engineering and Architecture teams to educate, evangelize, and validate secure development practices. Experience with secure software development design principles and secure testing is required for this position.In this role you will:Perform security activities, including security design reviews, threat modeling, code auditing on internally & externally developed softwareGovern automated secure coding tools and processes (SAST, DAST)Provide Application Security guidance and training to developers and testers for building resilient productsPerform penetration testing against web applications and hosting infrastructureProduce security reports pertaining to vulnerability metrics found in testing effortsOperate as incident responder for triage pertaining to web-based vulnerabilitiesManage 3rd-party security assessments for web applications and infrastructureLeverage experience and understanding of application security standards, frameworks, attack methods, and mitigation best practices (e.g., OWASP, SANS, NIST)Build, maintain, and enforce application security development policies, procedures & standardsContinuously improve program influence of modern application security principles in an Agile methodologyThis role could be a good fit if you: Possess excellent verbal and written communication skills and are able to navigate in an environment with both highly technical and highly nontechnical individualsHave passion for technology, security and innovationWant to work with a fast-paced project teamEnjoy working on Agile/Scrum development teamsAre driven to utilize your technical security expertise to increase the security posture at WPSLike to work on multiple concurrent projects with high degrees of impact to the businessYou’ll benefit from this experience by:Working in a highly complex highly security conscious environment that has a security umbrella that encompasses health Insurance, contract with Center for Medicare and Medicaid Service (CMS) and Department of Defense contracts that include, Tricare and VAWorking in an environment that serves our Nation’s military, veterans, Guard and Reserves along with their families.Assisting to develop an application security program from the ground up.Assisting in the modernization and transition of legacy systems to cloud-based platforms.You need to have: * U.S. citizenship is required for this position due to Department of Defense restrictions. *Bachelor’s degree in Information Technology, or related field OR equivalent post high school education and/or work-related experience.1 or more years of experience in Static Code Analysis and Software Vulnerability Assessment.Understanding of programming languages such as .Net, JavaScript, and Java.We also prefer: This role to be regionally local to the Madison, WI area, to allow for face to face meeting in our Madison office. We are open to considering applicants that would be 100% remote from an approved state.Related Security and/or Audit certifications, such as:Certified Ethical Hacker (CEH)Offensive Security Certified Professional (OSCP)Certified Associate in Software Testing (CAST)Certified Information Systems Security Professional (CISSP)A Comprehensive understanding of:Static and dynamic code assessment tools.Web Application Firewall concepts.Fortify WebInspectTenable Security CenterOWASP Top 10 application vulnerabilitiesworking with 3rd party service vendorsHIPAA Privacy RuleIf you have questions about this opportunity before applying please feel free to contact our Senior Technical Recruiter - Jake Borde directly - [email protected] and BenefitsEligible for annual Performance Bonus Program401(k) with dollar-per-dollar match up to 6% of salaryCompetitive paid time offHealth and dental insurance start DAY 1Vision insuranceFlexible spending, dependent care, and health savings accountsShort- and long-term disability, group life insuranceInnovative professional and cognitive development programsWho We AreWPS Health Solutions is an innovator in health insurance and a worldwide leader in claims administration, serving millions of beneficiaries in the United States and abroad.Founded in 1946, WPS offers health insurance plans for individuals, families, and seniors, and group plans for small and large businesses. We are a world-class claims processor and program administrator for the government’s Medicare program. And we manage benefits for millions of active-duty and retired military personnel and their families.WPS has been named one of the World's Most Ethical Companies® by the Ethisphere® Institute for 10 years in a row.Learn more about WPS. Our Purpose and ValuesOur purpose is to make healthcare easier for those we serve. Click HereOur values – Customer Focused, Individual Responsibility, Mutual Respect, and Driven & Passionate – are the core of who we are and how we conduct business every day.Health InsuranceWPS Health Insurance offers high-quality health insurance plans for individuals and families, Medicare supplement plans for seniors, and group health plans for businesses of every size.http://wpshealthsolutions.com/business-units/wpshi.shtmlMilitary and Veterans HealthWPS Military and Veterans Health administers claims and provides customer service and related activities for the U.S. Department of Defense and the U.S. Department of Veterans Affairs and their beneficiaries.http://wpshealthsolutions.com/business-units/wpsmvh.shtmlGovernment Health Administrators WPS Government Health Administrators manages Medicare Part A and Part B benefits for more than 7 million beneficiaries. As one of the largest contractors for the Centers for Medicare & Medicare Services, we’ve served Medicare beneficiaries and their health care providers since 1966.http://wpshealthsolutions.com/business-units/wpsgha.shtmlAriseArise Health Plan provides innovative and high-value health plans to groups and individuals in eastern and northeastern Wisconsin. With our quality Wisconsin-based customer service, Arise offers health care expertise with a personal touch.http://wpshealthsolutions.com/business-units/arise.shtmlEPIC Specialty BenefitsEPIC Specialty Benefits provides businesses group insurance products that cover:LifeDisabilityDentalVisionVoluntary benefitshttp://wpshealthsolutions.com/business-units/epicsb.shtmlStay connected: Sign-up for Job AlertsFOLLOW US!FacebookTwitterLinkedInEqual Opportunity Employer/Protected Veterans/Individuals with DisabilitiesThe contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c)