Description

You will manage vulnerability lifecycles and perform application penetration testing to maintain security posture.

Responsibilities

• Analyze security impacts of application, configuration, and infrastructure changes within the change management lifecycle.
• Assess configurations of applications, servers, and network devices for compliance with security standards.
• Perform internal application penetration testing, document findings, and recommend security improvements.
• Coordinate the resolution of application, infrastructure, and endpoint vulnerabilities with system owners, IT, and vendors.
• Investigate security incidents and provide thorough post-event analyses.
• Conduct annual password security audits and agency-wide user access audits.

Required Skills

• 5+ years of experience with NIST 800-53 rev 5 and/or CJIS specifications.
• 5+ years of experience in vulnerability management, software development lifecycles (SSDLC), and role-based authentication.
• 5+ years of expertise using automated scanners such as Nessus, Qualys, Retina, or Tenable.
• 5+ years of experience with web application security testing tools like Burp Suite, Fortify, or AppScan.
• 5+ years of familiarity with programming languages including Python, Java, JavaScript, C++, C#, SQL, HTML, CSS, or COBOL.
• 5+ years of scripting experience for automation using PowerShell, Python, JavaScript, or VBScript.
• Proven ability to manage stakeholders and communicate security risks effectively.
• Any Graduate degree.

Preferred Skills

• IT security or risk assessment certifications such as CISSP, CCSP, CISM, CEH, CompTIA Pentest+, or CompTIA Security+.

Key Skills

Education

Any Gradute