Application Security Analyst at Merchants Bank of Indiana

Carmel, Indiana, United States -

Full Time

Start Date

Immediate

Expiry Date

10 Sep, 26

Salary

0.0

Posted On

12 Jun, 26

Experience

0 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Application Security, Risk Assessment, User Access Reviews, Security Control Validation, Threat Modeling, Vendor Security Reviews, DevSecOps, Identity And Access Management, SaaS Security, API Security, Secure Configuration, Vulnerability Identification

Industry

Banking

Description

Description We are seeking an Application Security Analyst to join our team in a junior position focused on helping secure the business applications that support the organization. This role will support application and AI registers, perform application risk assessments, assist with user access reviews, validate security controls, and provide application configuration guidance. The Application Security Specialist will also participate in third-party and vendor security reviews, partner with application owners on remediation efforts, and contribute to lightweight threat modeling activities. The ideal candidate is analytical, collaborative, and interested in building practical, threat focused security solutions that reduce risk across the application environment. Our Information Security Analyst will be able to do the following confidently and independently... Maintain and support application and AI registers to help ensure an accurate inventory of in-scope business applications. Lead the application risk assessment program to identify security risks, document findings, and support risk-based decision making. Validate application security controls and document control effectiveness, gaps, and recommended improvements. Govern the user access review (UARs) process for business applications and help validate appropriate access based on job responsibilities. Provide application configuration guidance to support secure deployment and ongoing management of business applications. Participate in third-party and vendor security reviews for applications, platforms, and related services. Partner with application owners and other stakeholders to track and support remediation of identified security issues. Contribute to lightweight threat modeling activities to identify likely threats, common weaknesses, and practical mitigation options. Support the broader information security program by documenting processes, maintaining records, and assisting with related security initiatives as assigned. Serve as a liaison between Information Security and development teams to support DevSecOps. Provide support across information security functions, including risk management, governance, security operations, and related initiatives, as required. Requirements What we are looking for... Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Management Information Systems, or a related field preferred; equivalent practical experience may also be considered. 0–3 years of experience in information security, technology risk, IT administration, application support, or a related field, with an interest in application security. Understanding of application security concepts such as access management, secure configuration, control validation, vulnerability identification, and remediation tracking. Familiarity with application risk assessments, user access reviews, third-party security reviews, or security control testing is preferred. Understanding of web applications, SaaS platforms, APIs, identity and access management, and common security risks affecting business applications. Strong analytical, organizational, and documentation skills, with the ability to communicate clearly and work collaboratively with application owners and business stakeholders. Ability to manage multiple tasks, follow defined processes, and contribute to practical, risk-based security improvements in a fast-paced environment. Experience supporting a financial services organization or other regulated environment is preferred but not required. Entry-level security or technology certifications such as Security+, ISC2 CC, or similar credentials are a plus. Our Benefits: Health, Vision, Dental, 401K, ESOP, 100% Tuition Assistance, 4 weeks paid time off, plus a few more. About Merchants Ranked as a top performing U.S. public bank by S&P Global Market Intelligence, Merchants Bancorp is a diversified bank holding company headquartered in Carmel, Indiana operating multiple segments, including Multi-family Mortgage Banking that offers multi-family housing and healthcare facility financing and servicing; Mortgage Warehousing that offers mortgage warehouse financing; and Banking that offers retail and correspondent residential mortgage banking, agricultural lending, and traditional community banking. Merchants Bancorp, with $18.8 billion in assets and $11.9 billion in deposits as of December 31, 2024, conducts its business primarily through its direct and indirect subsidiaries, Merchants Bank of Indiana, Merchants Capital Corp., Merchants Capital Investments, LLC, Merchants Capital Servicing, LLC, Merchants Asset Management, LLC, and Merchants Mortgage, a division of Merchants Bank of Indiana. Merchants Bank and Merchants Capital have recently been honored with the 2025 USA Today Top Workplaces recognition, ranking 22nd nationally within the 500-999 employee category. This is the second year that Merchants has been recognized with this award. These accolades build on our strong history of workplace recognition, including being named a Best Place to Work in Indiana for seven consecutive years (2016–2022). For more information read the entire article here.

Responsibilities

The analyst will maintain application and AI registers, perform risk assessments, and validate security controls for business applications. They will also govern user access reviews and partner with stakeholders to remediate security issues and support DevSecOps.