Security Analyst - IT

Flex is the diversified manufacturing partner of choice that helps market-leading brands design, build and deliver innovative products that improve the world.

A career at Flex offers the opportunity to make a difference and invest in your growth in a respectful, inclusive, and collaborative environment. If you are excited about a role but don't meet every bullet point, we encourage you to apply and join us to create the extraordinary.

Job Description

We are looking for a motivated Security Analyst - IT to support application security activities across web, mobile, and API-based applications. In this role, you will assist with identifying and documenting security risks, running security tools, and supporting remediation efforts under the guidance of senior security and engineering team members. This is a hands-on learning role that builds strong foundations in secure software development practices and the SDLC.

What a typical day looks like:

• Assist with application security assessments by running approved tools (SAST/DAST/SCA) and collecting evidence
• Perform basic validation of findings (e.g., reproduce issues in lower environments) and escalate complex cases to senior analysts
• Log, track, and follow up on vulnerabilities in the ticketing system; support retesting after fixes are deployed
• Support secure development teams by sharing standard remediation guidance (e.g., OWASP recommendations) and approved code examples.
• Help maintain security tool configurations, access, and scan schedules; report tooling issues to the tool owner
• Assist with reviewing application changes for common risks (input validation, authentication/authorization checks, sensitive data handling)
• Support CI/CD security checks by monitoring pipeline results and coordinating with engineers on scan failures
• Contribute to documentation such as findings write-ups, runbooks, and metrics dashboards
• Stay current on application security basics and participate in internal training and knowledge sharing.

• 0-2 years of experience in information security, application security, software testing, IT operations, or a related field (internships and project work welcome)
• Foundational understanding of:
• OWASP Top 10 and common web vulnerabilities (XSS, SQLi, CSRF, SSRF, IDOR)
• How web applications and APIs work (HTTP, cookies, sessions, REST basics)
• Authentication and authorization concepts (e.g., SSO, Auth/JWT at a high level)
• Exposure to one or more security testing tools (training/lab experience acceptable):
• SAST/DAST/SCA tools and interpreting results
• Web proxy tools (e.g., Burp Suite Community or OWASP ZAP)
• Basic scripting ability (e.g., Python, PowerShell, or Bash) to automate simple tasks
• Comfort working in Linux/Unix and using common CLI tools
• Ability to read logs and scan outputs, identify likely false positives, and ask the right questions.

• PTO
• Health Insurance