Security Analyst / Pen Tester
Mindlance Dulles
Hiring manager is seeking candidates with a pen testing background who knows how to test for OWASP Top 10 web application vulnerabilities and is interested in growing their skills.
Responsibilities
The Technical Security Analyst position is within client’s IT Security group whose mission is to deliver information security solutions and services to protect client information assets, computing infrastructure, applications, and data. The Analyst will work within the vulnerability management team helping to identify and mitigate risks against client.The ideal candidate will have great interest in information security, has hands-on security engineering experience, and be able to come up with creative and unique solutions to security- related problems.
The Analyst will perform technical security engineering activities including the following:
- Perform vulnerability scan, analysis, validation and remediation activities.
- Perform network and application penetration testing.
- Validate vulnerabilities discovered through code analysis.
- Classify and prioritize the risk of new vulnerabilities according to the specifics of client environment's risk level, mitigating factors, and assessment of the impacts of internal and external threats.
- Engineer application, system and network security solutions to meet security requirements for varied operating environments.
- Research and assess new threats, vulnerability security trends and security alerts, recommend remedial action.
- Work with customers to oversee remediation of identified security issues.
- Perform technical and non-technical compliance activities.
- Provide security subject matter expertise to client product teams including developers and system administrators.
- Perform security validation for configuration settings on different systems.
- Bachelor’s degree with a minimum of 1 year of information security work experience.
- A strong interest in the field of information security.
- Intermediate scripting, system administration or software engineering background (e.g. Python, Ruby, Javascript, Perl, or Java).
- Fluent in a variety of web application protocols, operating systems and networking technologies.
- Strong understanding of common network vulnerabilities, OS vulnerabilities (Linux, Windows and OSX), patching and attack patterns.
- Intermediate understanding of OWASP Top 10 vulnerabilities such as XSS, XSRF, SQL Injection, Cookie Manipulation among others.
- Strong analytical, problem solving and engineering skills.
- Good written and verbal communication skills.
- Solid organizational skills and strong customer service skills.
- Experience with parsing / analysis of large data sets (e.g. vulnerability scan results).
- Certified Information Systems Security Professional (CISSP).
- Certified Ethical Hacker (CEH)
- Familiarity with Enterprise Vulnerability Management tools such as Rapid 7 Nexpose, Nessus and Qualys. Familiarity with Amazon Web Services (AWS) security.
Ashburn (VA), 1 mi from Dulles
Coordinates with team members to help ensure that information assurance inspections, tests, and reviews are coordinated for the environment
• Performs operational security tasks as assigned to include incident handling and analysis and prepare appropriate...
Fairfax (VA), 9 mi from Dulles
clients to fulfill their staffing needs.
Our client, Virginia's largest institution of higher education, is in need of a Security Analyst to monitor and protect sensitive data and systems from cyber threats by identifying vulnerabilities, assessing risks...
SoftPath Technologies LLCTysons, 15 mi from Dulles
Hello There, Hope you are doing well Please find Information Security Analyst the job description below and if you are interested, please reach out to me at (link removed) Position: Information Security Analyst Location: Tysons, Virginia...