Overview

The Security Analyst's primary role is to provide support for application development by analysis, tracking, and remediation of vulnerabilities discovered from many different security tools.

This is a remote role in the US.

Responsibilities

• Accountable for monitoring data threads from myriad security tools, correlating those data feeds into a cohesive picture, then performing analysis to determine if the data is a false positive or indications of external/internal impact.
• Accountable for tracking application vulnerabilities through security tools and meeting with the developers to formulate remediation plans.
• Reporting vulnerabilities on applications you support and manage end to end process of vulnerability oversight.
• Meeting regularly with Development teams to address compliance, SDLC, and OWASP standards.
• Administration of DAST, SAST, and SCA scanning tools.
• Provide evidence of compliance to auditing teams.
• Run scans of our software (source code) and work with teams to identify all suspected vulnerabilities, then classify them according to risk.
• Coordinate remediation of penetration test findings to deliver secure applications.
• Work with the teams to document the scan results and follow up with corrective action plans designed by Engineers and Architects.
• Great organization and communication skills
• Ability to work independently.

Qualifications

Academic and Professional Qualifications:

• Bachelor’s degree in a computer related field or equivalent/years of experience required.
• CISA, CISSP, CSSLP certification considered an asset

Experience:

• 3-5 years relevant work experience
• Prior IT Security experience
• Minimum 3 years work experience in vulnerability management, application security or other relevant work experience.
• Hands on experience as a system administrator and/or with application or vulnerability scanning tools.
• Familiarity with relevant security frameworks.

Travel Requirements:

• Up to 10% travel may be required 

Working Arrangements:

• Work is performed in a remote environment with minimal exposure to health or safety hazards.