If you are looking for a meaningful career where people work and act with passion, rethink the existing and always strive to find the best solution - you have come to the right place. We develop future technologies to relentlessly make supply chains better.
We are a leader in supply chain software solutions, helping organizations streamline operations, reduce costs, and improve efficiency.
Infios is seeking a Security Analyst to join our Threat and Vulnerability Management (TVM) Team, where you will play a critical role in protecting the organization's applications, systems, and data.
This is a hands-on role for a security professional passionate about Application Security, Vulnerability Management, and emerging AI security practices. You will work closely with Development, Product, and Engineering teams to identify, assess, and remediate security risks across web applications, APIs, cloud-native services, and AI/LLM-powered capabilities.
What a day in the life looks like
- Perform application and infrastructure vulnerability assessments using industry-leading security tools.
- Conduct and manage DAST, SAST, and Software Composition Analysis (SCA) activities to identify security risks.
- Analyze vulnerability findings, validate scan results, reduce false positives, and prioritize remediation efforts.
- Partner directly with development teams to assess vulnerabilities and provide actionable remediation recommendations.
- Track security findings through remediation and verify fixes have been successfully implemented.
- Serve as a trusted Application Security advisor to Engineering and Product teams.
- Support secure development practices, threat modeling exercises, and security design reviews.
- Leverage AI-powered tools to improve vulnerability analysis, testing efficiency, triage, and reporting.
- Lead and support security testing of AI and LLM-powered applications and features.
- Assess AI-related risks using frameworks such as the OWASP Top 10 for LLM Applications.
- Identify opportunities to automate repetitive security tasks and improve operational efficiency.
- Contribute to the continuous improvement of Threat and Vulnerability Management and Application Security processes, tools, and methodologies.
What you bring to the team:
- 5+ years of experience in Application Security, Product Security, or Vulnerability Management.
- Strong hands-on experience with DAST, SAST, Software Composition Analysis (SCA), and Web Application Security Testing.
- Experience performing API security testing and securing modern application architectures.
- Deep understanding of OWASP Top 10 vulnerabilities and Secure SDLC principles.
- Experience working directly with software development teams to drive vulnerability remediation.
- Experience with cloud platforms such as AWS, Azure, and OCI.
- Experience working with Cloud Security Posture Management (CSPM) platforms such as Wiz.
- Strong analytical, troubleshooting, and problem-solving skills.
- Excellent written and verbal communication skills with the ability to communicate technical concepts clearly.
- Knowledge of REST APIs, microservices, cloud-native applications, and application security architecture.
- Familiarity with OWASP Top 10 for LLM Applications.
- Preferred Qualifications
- Experience testing or securing LLM-powered applications in production environments.
- Experience with security testing tools such as Burp Suite, OWASP ZAP, Snyk, Semgrep, Checkmarx, Veracode, or similar solutions.
- Experience using AI-powered technologies to augment security analysis, testing, and remediation activities.
- Strong scripting or automation skills using Python, Bash, or similar languages.
- Exposure to SOC 2, ISO 27001, and related Application Security controls.
What We Do for You
- Work in a fast-paced and dynamic environment with global teams and innovative technologies.
- Opportunity to work on modern Application Security, Cloud Security, and AI Security initiatives.
- Collaborate with experienced security, engineering, and product professionals.
- Continuous learning and professional growth opportunities in emerging security domains.
- Be part of a company committed to innovation, purpose, and making supply chains better worldwide.
Salary range: Competitive and commensurate with experience.
This compensation range is indicative of the role. Compensation offered is based on evaluation during the interview process, the candidate's range and depth of experience, business and market financials, and internal pay parity.
#LI-SK1
#LI-REMOTE
Why join us?
At Infios, we're not just looking for employees; we're looking for partners in innovation, growth, and purpose. Meeting you where you are to create the future you need is at the core of who we are and what we do. Whether you're at the beginning of your career or a seasoned expert, we meet you on your journey, equipping you with the tools and opportunities to build the future you envision. Together, we will relentlessly work toward one common goal - making supply chains better.
We believe the future is better when supply chains work better.
We are an equal-opportunity employer and committed to inclusion in the workplace.
At Infios, we believe that inclusion is a fundamental cornerstone of our success. We are committed to creating a safe and welcoming environment where every individual’s unique experiences and perspectives are valued—whether they look, think, move, believe, or love differently.
All qualified applicants will receive consideration for employment without regard to race, color, ethnicity, national origin, sex, sexual orientation, gender identity, marital status, pregnancy, religion, age, disability, veteran status, genetic information, or any other characteristic protected by law.
Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this role. If you require assistance or accommodation due to a disability during the recruiting process, please let us know at [email protected]
Disclaimer: This job advertisement is not designed to cover a comprehensive listing of all duties or responsibilities that are required for this job. Please note that any salary information is a general guideline only. Individual compensation will be determined by various factors such as the scope and responsibilities of the position, experience, education, skills, location, and market and business considerations. Applications must be submitted via our career site.
Skills Required
- 5+ years of experience in Application Security, Product Security, or Vulnerability Management
- Experience with cloud platforms (AWS, Azure, OCI) and CSPM tools (WIZ)
- Strong hands-on experience with DAST and SAST tools and software composition analysis (SCA)
- Web application and API security testing experience
- Deep understanding of OWASP Top 10 and Secure SDLC principles
- Familiarity with OWASP Top 10 for LLMs
- Excellent verbal and written documentation and communication skills
- Analytical problem-solving skills and knowledge of application security architecture
- Experience working directly with software development teams on remediation and verification
- Solid understanding of modern application architectures (REST APIs, microservices, cloud)
- Experience testing or securing LLM-powered applications in production
- Familiarity with Burp Suite, ZAP, Snyk, Semgrep, Checkmarx, Veracode, or similar tools
- Experience using AI to augment security testing or analysis
- Strong scripting or automation skills (Python, Bash)
- Exposure to SOC 2 / ISO 27001 security controls related to AppSec
What We Do
We relentlessly make supply chains better. For everyone. No matter your business size. Whatever your goal. No matter the challenge. No matter your starting point. We will meet you where you are to create the future you need. With a portfolio of adaptable solutions, we empower businesses of all sizes to simplify operations, optimize efficiency and drive measurable impact. Infios serves more than 5,000 customers across 70 countries, delivering adaptable and innovative technologies that evolve with changing business needs.
