Mid-Level Application Security Analyst
Role summary
Spirit AeroSystems is seeking an experienced Application Security Analyst III to join their Commercial Business Units. This role is responsible for advanced application security analysis, risk-based prioritization, remediation coordination, secure development support, reporting, and process improvement. The analyst will work with various teams to reduce enterprise application risk, provide technical guidance, and ensure security practices align with organizational risk tolerance and regulatory requirements. Key responsibilities include leading application security analysis across diverse platforms, evaluating findings, coordinating remediation, and contributing to security standards and continuous improvement efforts.
This role is at Spirit AeroSystems, Inc. a wholly owned subsidiary of The Boeing Company, supporting Spirit’s Commercial Business Units (“Spirit Commercial”). Spirit Commercial designs and builds commercial aerostructures, including for Boeing Commercial Airplanes, one of Boeing’s three business units and the premier manufacturer of commercial jetliners for decades. Spirit Commercial’s core products include fuselages, pylons, nacelles and wing components, with a focus on innovative composite and aluminum manufacturing solutions.
Position Summary
The Application Security Analyst III is an experienced cybersecurity professional responsible for advanced application security analysis, risk-based prioritization, remediation coordination, secure development support, reporting, and process improvement. This role works closely with security leadership, application teams, software developers, infrastructure teams, compliance teams, and business stakeholders to reduce enterprise application risk. The analyst provides technical guidance, supports program maturity, and helps ensure application security practices align with organizational risk tolerance, regulatory requirements, secure development practices, and security standards.
Responsibilities
Position Responsibilities:
Lead application security analysis across web applications, APIs, mobile applications, enterprise systems, cloud-based applications, and third-party solutions.
Evaluate application security findings based on severity, exploitability, data sensitivity, exposure, business impact, compensating controls, and threat context.
Develop, coordinate, and validate risk-based remediation efforts for application teams, developers, vendors, and business stakeholders.
Support application security metrics, dashboards, executive summaries, and audit evidence.
Contribute to application security standards, procedures, playbooks, secure development guidance, and continuous improvement efforts.
Provide guidance and mentorship to junior analysts.
Qualifications
Basic Qualifications (Required Skills/Experience):
Minimum 5 years of cybersecurity, application security, software development, vulnerability management, security operations, or related experience.
Advanced cybersecurity, application security, secure software development, or information security certification. A relevant degree may qualify in lieu of certification.
Strong knowledge of application security lifecycle processes, including intake, assessment, analysis, prioritization, remediation, validation, and reporting.
Hand-on experience administering, engineering or supporting application security platforms.
Ability to assess risk using vulnerability data, threat context, application criticality, data sensitivity, exposure, and business impact.
Experience preparing reports, metrics, and recommendations for technical and leadership audiences.
Strong analytical, communication, and stakeholder management skills.
Preferred Qualifications (Desired Skills/Experience):
- Bachelor's degree in cybersecurity, information technology, computer science, software engineering, or a related field.
- Familiarity with NIST guidelines, CIS Controls, ISO 27002, CMMC, and/or other regulatory and security frameworks.
- Experience with secure software development lifecycle practices, application architecture review, cloud application security, API security or third-party application risk.
- Strong understanding of web applications, APIs, authentication, authorization, secure coding, data protection, application architecture, cloud-based applications, and secure configuration practices.
- Experience with scripting, automation, data analysis and/or API-based reporting.
Drug Free Workplace:
We are a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria are met as outlined in our policies.
Pay & Benefits:
We strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities.
We also provide eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work.
The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements.
Pay is based upon candidate experience and qualifications, as well as market and business considerations.
Summary Pay Range - Mid-Level (Level 3): $88,150 - $135,150
Kansas Tax Credit: Join Spirit AeroSystems’ Kansas team and you may be eligible for a $5,000 state of Kansas Aviation tax credit for up to five years. Click here for more information on the tax credit.
