Associate Web Application Security Specialist

VF Corporation•Greensboro, NC

4d•$72,000 - $90,000

About The Position

As a member of the Application Security team, you will be a key member of the team looking across the VF Global enterprise looking for threats and vulnerabilities that would potentially or unnecessarily place the company at risk. Working with the different teams within VF you will oversee the discovery of VF’s external assets and evaluate their security posture. You will work with both technology and business teams to reduce external risk exposure.

Requirements

Project management skills
Excellent communication skills and problem-solving ability
Demonstrated ability to work independently and with others
Ability to manage the details and compliance with standards and expectations
Demonstrate technical writing skills
Follows all defined IT standards and processes (i.e. IT Governance, SM&G, Architecture, etc.), and provides input for improvements to the appropriate process owners as needed
Maintains a proper balance between business and operational risk
Follow the defined project management standards and processes
Knowledge of operating systems, ports, and services
Knowledge of the OWASP top 10

Nice To Haves

Formal education in a related field is great to have
1-3 years of experience and professional achievements

Responsibilities

Oversee the Attack Surface Management program from the technical perspective
Regularly identify and catalog all assets, including new and existing ones, to maintain an up-to-date inventory of VF’s attack surface
Coordinate with various stakeholders to ensure a comprehensive understanding of the attack surface and facilitate effective risk reduction
Serve as a subject matter expert for application development and infrastructure teams
Analyze organization's cyber defense policies/configurations and evaluate weaknesses and vulnerabilities
Participate in the creation of effective and efficient processes to drive successful reduction of risk within VF
Research and advocate for new security solutions and technologies
Ensuring the highest levels of security practices are maintained by VF through projects, implementations
Establish communications with associates related to threats, vulnerabilities, processes and security risks across a Global landscape
Escalate as necessary high or critical risks, threats or vulnerabilities to the proper channels for resolution
Advocate and evangelize the importance of Application Security within VF and socialize through internal channels