{"id":3292103,"url":"https://alion.io/job/planetart-application-security-analyst","title":"Application Security Analyst","company":{"id":3759,"name":"PlanetArt","domain":"planetart.com","url":"https://alion.io/company/planetart","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Woodridge, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":91000,"max_usd":207000,"period":"year","method":"role_country_seniority_unknown","sample_n":3638},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CWE","optional":false},{"name":"GCP","optional":false},{"name":"ISO 27001","optional":false},{"name":"LLM","optional":false},{"name":"NIST CSF","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"RAG","optional":false},{"name":"Semgrep","optional":false},{"name":"Slack","optional":false},{"name":"Snyk","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-26T20:27:40Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-10-29T15:03:08Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Company and Vision\nPlanetArt’s vision is to be the leading seller of personalized and make-on-demand products worldwide. We provide consumers with unmatched tools and content and an unparalleled end-to-end customer experience that results in high-quality, meaningful finished products and memorable celebrations of life events.\nThe company’s brands include the popular FreePrints and FreePrints Photobooks apps and the industry leading SimplytoImpress card and stationery site, as well as Personal Creations, CafePress and ISeeMe! Visit www.planetart.com to learn more about our brands.\nWe have more than 500 team members across multiple offices, primarily in Calabasas CA, San Diego CA, Woodridge IL, Minneapolis, MN and Pleasanton, CA. We also have team members in two company-owned offices in China, as well as in Europe.\nJob Overview\nPlanetArt is looking for an Application Security Analyst to support the company’s Security Department. The successful candidate will be responsible for securing our applications by managing vulnerabilities identified through Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and other application security software (currently Snyk, with possible future use of Semgrep). This role will also oversee the Bug Bounty program, provide support for security notifications from the MSSP, conduct threat intelligence research, and contribute to governance, risk, compliance (GRC), cloud security, and third-party risk management activities. The analyst will use approved artificial intelligence (AI) tools to support security analysis and remediation, apply sound judgment to AI-generated outputs, and help assess the security of AI-enabled applications and development workflows.\nPLEASE NOTE: Candidates must be local to or willing to relocate to the (office) area as we operate on a hybrid work model (3 days onsite, 2 remote)\nWhat You’ll Do\nKey Responsibilities\nManage vulnerabilities identified through SAST, DAST, and other application security tools.\nValidate, prioritize, and assign vulnerabilities to Application Development (AppDev) teams; track remediation efforts and verify closure.\nOversee the Bug Bounty program, including triage, validation, and coordination with AppDev and external researchers.\nConduct threat intelligence research to identify risks to applications and the broader organization.\nSupport MSSP-provided security notifications through validation, triage, and assignment of issues.\nCollaborate with AppDev to improve secure coding practices and provide remediation guidance.\nUse approved AI tools to assist with vulnerability triage, code review, threat research, and remediation guidance; independently validate findings and recommendations before acting on them.\nReview AI-generated code and AI-assisted development workflows for security weaknesses, and help AppDev teams apply secure coding and testing practices.\nAssess AI-enabled applications and integrations for risks such as prompt injection, sensitive data exposure, insecure output handling, and excessive permissions in AI agents and connected tools.\nFollow company policies for AI use, protect source code, credentials, and confidential data, and contribute to guidance for evaluating AI tools and third-party AI services.\nContribute to organizational GRC initiatives, audits, and compliance efforts.\nProvide support for cloud security initiatives and third-party risk management reviews.\nRequirements\nWhat You Should Have\nSkills, Qualifications, and Requirements\n Bachelor’s degree in Computer Science, Cybersecurity, or equivalent experience.\n3-5 years of experience in application security, vulnerability management, or related role.\nHands-on experience with SAST/DAST tools (Snyk required; Semgrep preferred).\nKnowledge of OWASP Top 10, CWE, and secure development practices.\nPractical experience using generative AI tools or AI-assisted security and development tools, including writing effective prompts, verifying outputs, and recognizing inaccurate or unsupported results.\nWorking knowledge of large language models (LLMs), common AI application security risks, and controls such as input and output validation, access restrictions, and protection of sensitive data.\nAbility to evaluate AI-generated code and security recommendations using manual review and established testing tools; understanding of responsible AI use and data handling requirements.\nFamiliarity with bug bounty platforms and coordinated vulnerability disclosure processes.\nUnderstanding of threat intelligence processes and incident response workflows.\nStrong written and verbal communication skills with the ability to collaborate across technical and business teams.\nPreferred: Experience with cloud platforms (AWS, GCP, Azure), GRC frameworks (NIST CSF, ISO 27001, SOC 2), and professional certifications (GWAPT, OSWE, GWEB, CEH, CISSP). Familiarity with security testing of LLM applications, retrieval-augmented generation (RAG), AI agents, or AI service integrations is also preferred.\nWhat You Can Expect\nWorking Conditions\nWork is performed in an office environment with low to moderate noise levels.\nOccasional lifting of up to 20 pounds.\nPosition requires regular, continuous use of computer.\nPosition requires regular sitting and standing.\nPosition requires regular interaction with team members through the following methods: in-person, phone, WebEx, Slack, or email.\nMay require occasional travel.\nThis is a hybrid position; employees are expected to be in the office three days per week (Monday, Tuesday, and Thursday) with the option of working remotely two days (Wednesday and Friday).\nBenefits\nPlanetArt offers a comprehensive benefits package, including:\nHealth, Dental, and Vision Insurance\nLife Insurance \n401(k) with matching \nExcellent Work/Life Balance - Paid Time Off, Sick Days, Paid Holidays, and Floating Holidays \nEmployee Product Discounts","description_format":"text","description_chars":5906,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Hybrid work","Life insurance","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["Application Security","Gifts, Party Supplies & Souvenirs","Office Supplies & Stationery"],"lifecycle":[{"event":"open","at":"2026-10-26T20:27:40Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 2","filings_12m":2,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":112500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":1}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":43,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/planetart-application-security-analyst","json_url":"https://alion.io/job/planetart-application-security-analyst.json","meta":{"generated_at":"2026-10-29T16:19:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24401,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3759},"rest":"https://alion.io/mcp/rest/get_company?id=3759"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fplanetart-application-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fplanetart-application-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fplanetart-application-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/planetart-application-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fplanetart-application-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3292103}},{"tool":"search_jobs","arguments":{"company":"planetart.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3292103},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}