Job description

Here at Appian, our values of Intensity and Excellence define who we are. We set high standards and live up to them, ensuring that everything we do is done with care and quality. We approach every challenge with ambition and commitment, holding ourselves and each other accountable to achieve the best results. When you join Appian, you’ll be part of a passionate team dedicated to accomplishing hard things, together. Information Security Analyst McLean, Virginia | Work Model: On-site at Appian Headquarters ABOUT THE TEAM The Information Security team is the guardian of trust at Appian, protecting the infrastructure that powers AI-Powered Process Automation for the world's most demanding enterprises and government agencies. We operate with autonomy and urgency, identifying security risks across the organization and ensuring vulnerabilities are resolved within strict SLAs. Our work directly enables Appian's ability to serve highly regulated industries and maintain certifications that unlock enterprise growth. THE OPPORTUNITY As enterprises accelerate their adoption of AI-Powered Process Automation, security and compliance have become the foundation of customer trust. This role exists because Appian's growth in government and regulated sectors demands relentless focus on vulnerability management and FedRAMP audit readiness. You will be at the center of cross-functional collaboration, translating security findings into actionable remediation plans that protect our platform and our customers. WHAT YOU'LL DO Lead comprehensive vulnerability assessments across Appian's infrastructure using industry-standard tools, identifying and prioritizing security risks based on severity and business impact. Partner with Engineering teams to drive timely remediation of vulnerabilities and misconfigurations, ensuring all findings meet contractual SLAs and regulatory requirements including FedRAMP standards. Execute audit preparation and support activities for FedRAMP and other compliance frameworks, providing evidence documentation and coordinating responses to auditor findings. Analyze security data and trends using advanced Excel techniques and vulnerability management platforms, delivering actionable insights to leadership on risk posture and remediation progress. Collaborate with cross-functional stakeholders across Product, Cloud Operations, and Compliance teams to implement security best practices and reduce the attack surface of our Enterprise-Grade Orchestration platform. REQUIRED QUALIFICATIONS Education: Hold a Bachelor's degree or higher in Computer Science, Cybersecurity, Information Systems, or a related STEM field. Experience: 2+ years of experience in information security, vulnerability management, or security operations within enterprise technology environments. Vulnerability Management: Hands-on experience with vulnerability scanning and management platforms such as Nessus or Qualys, including configuration, scan execution, and results analysis. Compliance Expertise: Working knowledge of FedRAMP audit processes, controls frameworks, and regulatory compliance requirements in government or highly regulated industries. Data Analysis: Advanced proficiency in Excel for data manipulation, trend analysis, and reporting of security metrics and vulnerability status. Audit Coordination: Demonstrated ability to support security audits by preparing documentation, responding to findings, and tracking remediation activities to closure. PREFERRED QUALIFICATIONS Security Certifications: Industry-recognized certifications such as Security+, CEH, CISSP, or GIAC demonstrating commitment to the security profession. Cloud Security: Experience with cloud infrastructure security in AWS, Azure, or Google Cloud Platform environments. Scripting Skills: Ability to automate security workflows using Python, PowerShell, or similar scripting languages to improve efficiency and scalability. We value experience with enterprise platforms as these skills translate well into our Enterprise-Grade Orchestration environment. The base salary range represents a good faith and reasonable estimate of the range at the time of posting. Actual compensation will be dependent on a number of factors including, but not limited to, the candidate’s relevant work experience, qualifications, internal peer equity, and market and business conditions that exist when extending an offer. A discretionary bonus may be awarded in recognition of individual and company performance. In addition, Appian provides generous benefits offerings that include a 401(k) plan with company match, flexible time off, paid parental leave, medical, dental, and vision plans, life insurance, disability insurance, wellness programs, flexible spending accounts, health savings account contributions, an employee referral bonus program, and learning and development resources. Certain positions may be eligible for equity awards. Pay and benefits are subject to change at any time, consistent with the terms of any applicable compensation, commission, bonus, or benefit plans. Base Salary Range $100,000 — $200,000 USD Tools and Resources Training and Development: During onboarding, we focus on equipping new hires with the skills and knowledge for success through department-specific training. Continuous learning is a central focus at Appian, with dedicated mentorship and the First-Friend program being widely utilized resources for new hires. Growth Opportunities: Appian provides a diverse array of growth and development opportunities, including our leadership program tailored for new and aspiring managers, a comprehensive library of specialized department training through Appian University, skills based training, and tuition reimbursement for those aiming to advance their education. This commitment ensures that employees have access to a holistic range of development opportunities. Community: We’ll immerse you into our community rooted in respect starting on day one. Appian fosters inclusivity through our 8 employee-led affinity groups . These groups help employees build stronger internal and external networks by planning social, educational, and outreach activities to connect with Appianites and larger initiatives throughout the company. Benefits Appian offers a comprehensive benefits package designed to support your health, wellbeing, and financial future. Benefits may include health coverage, Employee Assistance Program (EAP) with free mental health support, life and disability insurance, an Employee Stock Purchase Program (ESPP), a retirement/pension plan, wellness dollars, tuition reimbursement, family-forming benefits and more. Benefits vary by country—please ask your Talent Acquisition contact for details specific to the location you are applying to. About Appian Appian provides AI automation for the most important business processes at the world’s largest organizations. Our platform is known for its unique power, reliability, and scale. We’ve been automating processes for more than 25 years and have proven expertise in enterprise operations. For more information, visit appian.com . Follow Appian: LinkedIn , YouTube , Instagram , Facebook , and X . Appian is an equal opportunity employer that strives to attract and retain the best talent. All qualified applicants will receive consideration for employment without regard to any characteristic protected by applicable federal, state, or local law. Appian provides reasonable accommodations to applicants in accordance with all applicable laws. If you need a reasonable accommodation for any part of the employment process, please contact us by email at ReasonableAccommodations@appian.com . Please note that only inquiries concerning a request for reasonable accommodation will be responded to from this email address. Appian's Applicant & Candidate Privacy Notice

Requirements

Must-haves

McLean, Virginia | Work Model: On-site at Appian Headquarters
Lead comprehensive vulnerability assessments across Appian's infrastructure using industry-standard tools, identifying and prioritizing security risks based on severity and business impact.
Partner with Engineering teams to drive timely remediation of vulnerabilities and misconfigurations, ensuring all findings meet contractual SLAs and regulatory requirements including FedRAMP standards.
Execute audit preparation and support activities for FedRAMP and other compliance frameworks, providing evidence documentation and coordinating responses to auditor findings.
Analyze security data and trends using advanced Excel techniques and vulnerability management platforms, delivering actionable insights to leadership on risk posture and remediation progress.
Collaborate with cross-functional stakeholders across Product, Cloud Operations, and Compliance teams to implement security best practices and reduce the attack surface of our Enterprise-Grade Orchestration platform.
Education: Hold a Bachelor's degree or higher in Computer Science, Cybersecurity, Information Systems, or a related STEM field.
Experience: 2+ years of experience in information security, vulnerability management, or security operations within enterprise technology environments.
Vulnerability Management: Hands-on experience with vulnerability scanning and management platforms such as Nessus or Qualys, including configuration, scan execution, and results analysis.
Compliance Expertise: Working knowledge of FedRAMP audit processes, controls frameworks, and regulatory compliance requirements in government or highly regulated industries.
Data Analysis: Advanced proficiency in Excel for data manipulation, trend analysis, and reporting of security metrics and vulnerability status.
Audit Coordination: Demonstrated ability to support security audits by preparing documentation, responding to findings, and tracking remediation activities to closure.

Nice-to-haves

Security Certifications: Industry-recognized certifications such as Security+, CEH, CISSP, or GIAC demonstrating commitment to the security profession.
Cloud Security: Experience with cloud infrastructure security in AWS, Azure, or Google Cloud Platform environments.
Scripting Skills: Ability to automate security workflows using Python, PowerShell, or similar scripting languages to improve efficiency and scalability.
We value experience with enterprise platforms as these skills translate well into our Enterprise-Grade Orchestration environment.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiawsazurepython

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Parental Leave

Wellness