Description

You will evaluate security impacts across application, configuration, and infrastructure changes within the change management lifecycle.

Responsibilities

• Assess application, server, and network device configurations for compliance with security standards.
• Analyze and document security risks associated with new system implementations, interfaces, and discovered vulnerabilities.
• Coordinate vulnerability remediation with system owners, IT teams, and vendors while tracking resolution progress.
• Respond to and investigate security incidents, providing thorough post-event analyses.
• Perform internal application penetration testing and execute annual password and user access audits.

Required Skills

• 5+ years of experience in software development lifecycle (SDLC) and vulnerability management processes.
• 5+ years of expertise using automated vulnerability scanners such as Nessus, Qualys, Retina, or Tenable.
• 5+ years of experience with web application security testing tools including Burp Suite, Fortify, or AppScan.
• 5+ years of familiarity with programming languages including Python, Java, JavaScript, C++, C#, SQL, HTML, CSS, or COBOL.
• 5+ years of scripting experience for automation using PowerShell, Python, JavaScript, VBScript, or WDL.
• Knowledge of NIST 800-53 rev 5 and/or Criminal Justice Information System (CJIS) specifications.
• Experience with role-based authentication methodologies.

Preferred Skills

• IT security or risk assessment certifications such as CISSP, CCSP, CISM, CEH, CompTIA Pentest+, or CompTIA Security+.

Key Skills

Education

Any Gradute