Description

You will manage vulnerability lifecycles and conduct application penetration testing to maintain security standards.

This role is hybrid.

Responsibilities

• Analyze the security impact of application, configuration, and infrastructure changes within the change management lifecycle.
• Perform internal application penetration testing, document findings, and recommend security posture improvements.
• Investigate security incidents and provide thorough post-event analyses.
• Assess application, server, and network device configurations for compliance with security standards.
• Determine security control needs for information systems and networks, documenting requirements and maintaining process documentation.

Required Skills

• 5+ years of experience in vulnerability management processes and the software development lifecycle.
• 5+ years of experience using automated vulnerability scanners such as Nessus, Qualys, Retina, or Tenable.
• 5+ years of experience with web application security testing tools like Burp Suite, Fortify, or AppScan.
• 5+ years of experience with programming languages including Python, Java, JavaScript, C++, C#, SQL, HTML, CSS, or COBOL.
• 5+ years of experience with scripting for automation, such as WDL, VBScript, JavaScript, PowerShell, or Python.
• Knowledge of NIST 800-53 rev 5 and/or Criminal Justice Information System (CJIS) specifications.
• Experience with role-based authentication methodologies.
• Proven ability to manage stakeholders and communicate security risks effectively.

Preferred Skills

• IT security or risk assessment certifications such as CISSP, CCSP, CISM, CEH, CompTIA Pentest+, or CompTIA Security+.

Key Skills

Education

Any Graduate