Description

You will own the security posture and compliance monitoring for the information systems.

Responsibilities

• Analyze security impact of application, configuration, and infrastructure changes through the change management lifecycle.
• Assess application, server, and network device configurations against security standards.
• Analyze and document security impact of new systems and interfaces on the environment.
• Assess and document risks associated with newly discovered vulnerabilities.
• Coordinate vulnerability resolution for applications and infrastructure with relevant stakeholders and track progress.
• Respond to and investigate security incidents, providing thorough post-event analyses.
• Perform internal application penetration testing, documenting findings and recommending improvements.
• Determine necessary protection controls for information systems and document them.

Required Skills

• 5+ years experience with Software development lifecycle and vulnerability management processes.
• 5+ years familiarity with programming languages including Python, Java, JavaScript, C++, C#, SQL, HTML, CSS, and COBOL.
• 5+ years expertise using automated vulnerability scanners such as Nessus, Qualys, Retina, and/or Tenable.
• 5+ years familiarity with web application security testing tools like Burp Suite, Fortify, and/or AppScan.
• 5+ years basic scripting skills using tools like PowerShell, Python, or JavaScript for automation.
• 5+ years experience applying NIST 800-53 rev 5 and/or CJIS specifications.
• Any Graduate degree required.

Key Skills

Education

Any Graduate