{"id":2210384,"url":"https://alion.io/job/ccc-intelligent-solutions-application-security-analyst","title":"Application Security Analyst","company":{"id":58490,"name":"CCC Intelligent Solutions","domain":"cccis.com","url":"https://alion.io/company/ccc-intelligent-solutions","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chicago, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":100000,"max_usd":230000,"period":"year","method":"role_country_seniority_unknown","sample_n":2855},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"GitHub","optional":false},{"name":"GitLab","optional":false},{"name":"JavaScript","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false},{"name":"AWS","optional":true},{"name":"Burp Suite","optional":true},{"name":"Checkmarx","optional":true},{"name":"GCP","optional":true},{"name":"Veracode","optional":true},{"name":"Wiz","optional":true}],"status":"live","first_seen_at":"2026-10-09T00:00:00Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-13T02:36:05Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Salary range is:\n$56,930.88 - $70,000.00This position is bonus and/or commission eligible.\nCCC Intelligent Solutions Inc. (CCC) is a leading cloud platform for the multi-trillion-dollarinsurance economy, creating intelligent experiences for insurers, repairers, automakers, part suppliers, and more. At CCC, we’re making life just work by empowering more than 35,000 businesses with industry-leading technology to get drivers back on the road and to health quickly and seamlessly. We’repushing boundaries with innovative AI solutions that simplify and enhance the claims and repair journey. Throughpurposeful innovation and the strength of its connections, CCC technologies empower the people and industry relied upon to keep lives moving forward when it matters most. Learn more about CCC at www.cccis.com.\nThe Role\nThe Application Security Analyst is responsible for helping embed security throughout the software development lifecycle. This role partners closely with development, engineering, product, and platform teams to identify, assess, prioritize, and remediate application security risks. The analyst will support vulnerability management, security testing, secure coding initiatives, and security automation efforts that help strengthen the organization's overall security posture.This position is ideal for an individual with a strong technical foundation, a passion for application security, and the ability to collaborate effectively across engineering teams to drive practical risk reduction.\nKey Responsibilities:\nPerform application security assessments, including static analysis, dynamic analysis, software composition analysis, and manual validation of findings.\nReview and triage security findings, distinguishing true positives from false positives and helping development teams prioritize remediation efforts.\nSupport secure software development lifecycle (SSDLC) initiatives and security-by-design practices across engineering teams.\nConduct threat modeling and security reviews for new applications, services, and technology implementations.\nPartner with development teams to identify security weaknesses and provide remediation guidance.\nAssist with penetration testing coordination and validation of remediation activities.\nDevelop and maintain security metrics, reporting, and dashboards related to application security risk.\nSupport vulnerability management processes, including identification, prioritization, tracking, and verification of remediation efforts.\nCreate automation, scripts, and integrations that improve security workflows and reduce manual effort.\nEvaluate software supply chain risks and support secure use of open-source components.\nAssist in developing security standards, procedures, and secure coding guidance.\nDeliver security awareness and secure coding training to engineering teams.\nSupport incident response activities involving application security vulnerabilities when required.\nBe familiar with AI workflows and enablement\nRequirements:\nBachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.\nUnderstanding of common web application vulnerabilities, including the OWASP Top 10.\nExperience working with security testing tools such as SAST, DAST, SCA, and secrets detection platforms.\nKnowledge of application architectures, APIs, cloud-native applications, and modern development practices.\nExperience with scripting languages such as Python, PowerShell, JavaScript, Go, or similar.\nFamiliarity with CI/CD pipelines and source control platforms such as GitHub, GitLab, or Azure DevOps.\nStrong analytical, troubleshooting, and communication skills.\nAbility to effectively communicate technical findings to both technical and non-technical stakeholders.\nPreferred Qualifications\nExperience with software supply chain security programs.\nFamiliarity with tools such as Endor Labs, Wiz, GitHub Advanced Security, Veracode, Checkmarx, Burp Suite, or similar technologies.\nKnowledge of cloud security concepts across Azure, AWS, or GCP.\nExperience automating security processes and workflow integrations.\nRelevant certifications such as Security+, GSEC, CSSLP, GWAPT, OSCP, or related credentials.\nExperience participating in secure architecture reviews and threat modeling exercises.\nSuccess Measures\nIn this role, success will be measured by:\nReduction in application security risk through effective vulnerability identification and remediation.\nTimely validation and prioritization of security findings.\nIncreased adoption of secure development practices across engineering teams.\nImprovements in security automation and operational efficiency.\nStrong partnership and engagement with developers, architects, and product teams.\nContribution to measurable improvements in the organization’s security posture.\n\nInterview Policy & Privacy Notice:\nA video interview is required for this position. Video interviews are transcribed. Transcriptions are retained and may be reviewed by CCC and our recruiters. Candidates are not permitted to use generative AI or automated assistance during the interviews unless explicitly allowed by the interview team for a specific exercise. Our Job Applicant Privacy Notice is available HERE.\nAbout CCC's Commitment to Employees:\nCCC Intelligent Solutions understands that our employees play an integral role in our vision to shape a world where life just works. Our team is defined by our values of Integrity, Customer-Focus, Innovation, Inclusion & Diversity, Tenacity, and Connection. Through diverse perspectives, purposeful innovation, and the strength of connections, our technologies empower the people and industry relied upon to keep lives moving forward when it matters most.\nAt CCC, together everyone can thrive as we innovate and collaborate, creating employee experiences that just work. We are committed to providing opportunities for our people to make real-life impacts, advance in their careers, and contribute to CCC’s success.\nCCC offers competitive compensation and benefits to support you and your families, including:\n401K Match\n\nPaid time off\n\nAnnual Incentive Plan Performance Bonus\n\nComprehensive health insurance\n\nAdoption Assistance\n\nTuition Reimbursement\n\nWellness Programs\n\nStock Purchase Plan options\n\nEmployee Resource Groups\n\nFor more information about our benefits, please check out our careers site.\nHere, you belong. You are seen, valued, and respected. We celebrate you for who you are and all you bring. Every voice is heard and is important to our success. You can hear what employees have to say about our culture here\nIf you require reasonable accommodation to complete a job application, please contact (800) 621-8070.","description_format":"text","description_chars":6701,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Health insurance","Wellness"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","InsurTech"],"lifecycle":[{"event":"open","at":"2026-10-10T02:14:12Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.859,"p_room":1,"age_days":4,"expected_fill_days":26,"reasons":["conf:3","win:early"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/ccc-intelligent-solutions-application-security-analyst","json_url":"https://alion.io/job/ccc-intelligent-solutions-application-security-analyst.json","meta":{"generated_at":"2026-10-13T12:56:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20102,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58490},"rest":"https://alion.io/mcp/rest/get_company?id=58490"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fccc-intelligent-solutions-application-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fccc-intelligent-solutions-application-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fccc-intelligent-solutions-application-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ccc-intelligent-solutions-application-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fccc-intelligent-solutions-application-security-analyst"}]}