Vulnerability Analyst

Description

ResponsibilitiesConduct vulnerability assessments for Web and Mobile applicationsExecute application security testing activities, including source code review, vulnerability assessments (static and dynamic), and remediation coordinationCoordinate testing with Information Security, Development, and Quality Assurance teamsUse manual testing techniques to gain understanding of the application and reduce false negativesUse automated tools to pinpoint vulnerabilities and reduce timeconsuming tasksCompile and track vulnerabilities for metrics purposesManually validate report findings for accuracyManage vulnerability assessments and coordinate remediations by acting as a liaison between the Information Security and Development teams; provide recommendations to improve security postureIn addition, the Analyst will provide written and verbal updates to the Information Security Architecture Manager on current vulnerabilities and countermeasure recommendations.RequirementsUnderstanding of modern security assessment concepts (e.g., OWASP) and penetration testing toolsExperience with manual and automated testing technologiesExperience with HP WebInspect is a plusStrong familiarity with ServerSide Languages .NETGrailsJavaNodeJSStrong familiarity with FrontEnd Languages JSPGSPReactJSAngularJSJQueryStrong understanding of Single Page Application (SPA) testingStrong familiarity with both Windows and Unix operating systemsStrong understanding of networking protocols and web application architectureFamiliarity with Stash/Bitbucket source code repository, Git version control, and JIRA issue trackingStrong written and verbal communication skills, including the ability to articulate technical concepts, impacts, risks, mitigations, and remediation guidanceAble to work in an open team space/collaborative environment