Associate, Information Security
This job is no longer available
There are still lots of open positions. Let's find the one that's right for you.
About The Position
The Associate, Information Security is a critical role responsible for detecting threats and vulnerabilities in target systems, networks, and applications. This position involves conducting comprehensive systems, network, and web vulnerability assessments and security testing. The incumbent will identify security flaws and weaknesses that could be exploited, thereby posing business risks, and will provide essential insights into the most pressing security issues, suggesting how to prioritize security resources effectively. In addition to threat detection, the Associate will develop, manage, and operate security services aimed at assessing, prioritizing, and mitigating risks specifically in containerized environments. This includes a focus on container security assessments, threat analysis, policy development, and incident response within application security. The role requires collaboration with development, operations, and security teams to ensure secure container lifecycle management. The Associate will also design security controls and automate security testing for containerized applications, evaluate and recommend security tools and technologies, and engage with vendors to implement best practices for container security. The essential functions of this role include conducting security assessments and vulnerability scans of container images, orchestrators, and runtime environments to identify potential risks. The Associate will monitor and analyze container security threats, provide recommendations for mitigation, and collaborate with various teams to integrate security best practices throughout the container lifecycle. Additionally, the role involves developing and maintaining scripts and tools for automated security testing, providing training on container security best practices, maintaining documentation of security assessments, and assisting in the investigation and response to security incidents involving containerized environments.
