What are the responsibilities and job description for the Security Analyst - Remote position at Altera Digital Health Inc. United States?
Overview
The Security Analyst's primary role is to provide support for application development by analysis, tracking, and remediation of vulnerabilities discovered from many different security tools.
This is a remote role in the US.
Responsibilities
- Accountable for monitoring data threads from myriad security tools, correlating those data feeds into a cohesive picture, then performing analysis to determine if the data is a false positive or indications of external/internal impact.
- Accountable for tracking application vulnerabilities through security tools and meeting with the developers to formulate remediation plans.
- Reporting vulnerabilities on applications you support and manage end to end process of vulnerability oversight.
- Meeting regularly with Development teams to address compliance, SDLC, and OWASP standards.
- Administration of DAST, SAST, and SCA scanning tools.
- Provide evidence of compliance to auditing teams.
- Run scans of our software (source code) and work with teams to identify all suspected vulnerabilities, then classify them according to risk.
- Coordinate remediation of penetration test findings to deliver secure applications.
- Work with the teams to document the scan results and follow up with corrective action plans designed by Engineers and Architects.
- Great organization and communication skills
- Ability to work independently.
Qualifications
Academic and Professional Qualifications:
- Bachelor’s degree in a computer related field or equivalent/years of experience required.
- CISA, CISSP, CSSLP certification considered an asset
Experience:
- 3-5 years relevant work experience
- Prior IT Security experience
- Minimum 3 years work experience in vulnerability management, application security or other relevant work experience.
- Hands on experience as a system administrator and/or with application or vulnerability scanning tools.
- Familiarity with relevant security frameworks.
Travel Requirements:
- Up to 10% travel may be required
Working Arrangements:
- Work is performed in a remote environment with minimal exposure to health or safety hazards.