Description

Perform application security testing, ethical hacking, and vulnerability management for MES applications. Implement security frameworks within DevSecOps environments and ensure compliance through risk assessments.

Responsibilities

• Implement security frameworks within DevSecOps environments using BURP Suite, Fortify, and manual testing.
• Identify OWASP Top 10 vulnerabilities and provide remediation guidance to development teams.
• Utilize Qualys to identify and address vulnerabilities in collaboration with stakeholders.
• Conduct HIPAA Privacy & Security Risk Assessments to ensure compliance and data security.
• Identify security gaps through risk management and assist in developing mitigation strategies.

Required Skills

• 2+ years of experience in manual security testing and using application security tools like BURP Suite and Fortify.
• 2+ years of experience updating privacy and security policies based on assessment gaps.
• 2+ years of experience discovering and assessing systems, networks, and components via vulnerability scanning and risk assessment.
• 2+ years of experience documenting vulnerability assessment results in an actionable format.
• 2+ years of experience working with application development frameworks such as .NET and Java.
• 3+ years of experience with network mapping and vulnerability scanning tools like Nessus and Nmap.
• Proficiency with Linux and Windows operating systems and command-line interfaces.

Preferred Skills

• Ability to serve as a knowledge base for organizational compliance requirements and mitigation strategies.

Key Skills

Education

Any Graduate