Application Security Analyst

TEKsystems•Tampa, FL

5d•$52 - $58•Remote

About The Position

This position will be accountable for the identification, prioritization, creation, tracking and coordination of various remediation plans for vulnerabilities from network based and application-based assessments. Remediation plan must be made actionable for patch team and application owners to carry out remediation. This position will be the liaison between the vulnerability management team and various IT teams and must be able to provide technical remediation details or workarounds, help track and identify asset inventory, log work tickets and exceptions and research vulnerability findings. Must be able to quickly respond and assess exposure and impact of zero-day vulnerabilities and provide management with briefings and course of action for mitigation. Will also advise on other critical and high-risk vulnerabilities that may impact operations and critical infrastructure. Perform compliance scanning to analyze configurations and make recommendations of hardening configurations for Windows OS including servers, endpoints, VDI and thin clients. Perform ad hoc vulnerability scans to verify remediation. Perform vulnerability management system administration functions, as required.

Requirements

Extensive SAST and DAST experience.
Experience securing CI/CD pipeline.
3-5+ years of recent focused Application security experience.
Deep understanding of OWASP.
Experience discovering vulnerabilities in applications and code, determining if it is a true vulnerability, and working with software engineers to fix it.
Experience with static and dynamic code scanning.
At least one year of enterprise experience with setting up code scanning in Azure Dev Ops.
Strong network security experience (understanding port numbers, ICMP, SSH ports, etc.).
2 years of Python experience for developing scripts to streamline vulnerability assessments and automate reporting.

Nice To Haves

Experience with Rapid 7 for DAST.
Experience with Check Marks for SAST.

Responsibilities

Identify, prioritize, create, track, and coordinate remediation plans for vulnerabilities from network and application-based assessments.
Act as a liaison between the vulnerability management team and various IT teams.
Provide technical remediation details or workarounds.
Track and identify asset inventory.
Log work tickets and exceptions.
Research vulnerability findings.
Respond and assess exposure and impact of zero-day vulnerabilities.
Provide management with briefings and course of action for mitigation.
Advise on other critical and high-risk vulnerabilities that may impact operations and critical infrastructure.
Perform compliance scanning to analyze configurations and make recommendations for hardening configurations for Windows OS (servers, endpoints, VDI, thin clients).
Perform ad hoc vulnerability scans to verify remediation.
Perform vulnerability management system administration functions.