Security Analyst – IT Full Time NEW

Flex is the diversified manufacturing partner of choice that helps market-leading brands design, build and deliver innovative products that improve the world. A career at Flex offers the opportunity to make a difference and invest in your growth in a respectful, inclusive, and collaborative environment. If you are excited about a role but don’t meet every bullet point, we encourage you to apply and join us to create the extraordinary.

We are looking for a motivated Security Analyst – IT to support application security activities across web, mobile, and API-based applications. In this role, you will assist with identifying and documenting security risks, running security tools, and supporting remediation efforts under the guidance of senior security and engineering team members. This is a hands-on learning role that builds strong foundations in secure software development practices and the SDLC.

What a typical day looks like:

• Assist with application security assessments by running approved tools (SAST/DAST/SCA) and collecting evidence
• Perform basic validation of findings (e.g., reproduce issues in lower environments) and escalate complex cases to senior analysts
• Log, track, and follow up on vulnerabilities in the ticketing system; support retesting after fixes are deployed
• Support secure development teams by sharing standard remediation guidance (e.g., OWASP recommendations) and approved code examples.
• Help maintain security tool configurations, access, and scan schedules; report tooling issues to the tool owner
• Assist with reviewing application changes for common risks (input validation, authentication/authorization checks, sensitive data handling)
• Support CI/CD security checks by monitoring pipeline results and coordinating with engineers on scan failures
• Contribute to documentation such as findings write-ups, runbooks, and metrics dashboards
• Stay current on application security basics and participate in internal training and knowledge sharing.

The experience we’re looking to add to our team:

• 0–2 years of experience in information security, application security, software testing, IT operations, or a related field (internships and project work welcome)
• Foundational understanding of:
• OWASP Top 10 and common web vulnerabilities (XSS, SQLi, CSRF, SSRF, IDOR)
• How web applications and APIs work (HTTP, cookies, sessions, REST basics)
• Authentication and authorization concepts (e.g., SSO, Auth/JWT at a high level)
• Exposure to one or more security testing tools (training/lab experience acceptable):
• SAST/DAST/SCA tools and interpreting results
• Web proxy tools (e.g., Burp Suite Community or OWASP ZAP)
• Basic scripting ability (e.g., Python, PowerShell, or Bash) to automate simple tasks
• Comfort working in Linux/Unix and using common CLI tools
• Ability to read logs and scan outputs, identify likely false positives, and ask the right questions.

What you’ll receive for the great work you provide:

• PTO
• Health Insurance

BB04

• Site

Flex is an Equal Opportunity Employer and employment selection decisions are based on merit, qualifications, and abilities. We do not discriminate based on: age, race, religion, color, sex, national origin, marital status, sexual orientation, gender identity, veteran status, disability, pregnancy status, or any other status protected by law. We’re happy to provide reasonable accommodations to those with a disability for assistance in the application process. Please email accessibility@flex.com and we’ll discuss your specific situation and next steps (NOTE: this email does not accept or consider resumes or applications. This is only for disability assistance. To be considered for a position at Flex, you must complete the application process first).