Offensive Security Analyst

Liberty University

5d•$75,000 - $100,000•Remote

About The Position

Provide security architecture expertise to assist with architecting and implementing security monitoring solutions and applications required to protect Liberty University’s networks and systems with a focus on penetration testing.

Requirements

A Bachelor's degree in Computer Science, Information Security, Information Systems, or related field required.
3-5 years' relevant security experience and fluency with at least one and experience with another of the following required: JavaScript, HTML, Python, Java, C#, PowerShell.
Experience working with any/all of the following security technologies: penetration testing tools, network traffic analysis (NTA), security information event management (SIEM), network vulnerability scanners, web application firewalls (WAF), web application scanners (WAS), domain name service (DNS) security, data loss prevention (DLP), endpoint detection and response (EDR), email security, shared storage security, security orchestration, automation and response (SOAR), intrusion protection/detection systems (IPS/IDS).
Ability to effectively communicate both verbally and in writing to convey clear, well articulated information.
Ability to understand, speak, and write English in order to convey messages and correspond in an articulate and professional manner.
Possess public communication skills that allow professional representation of Liberty University.
Strong organizational skills.
Computer skills.
Intuitively able to reason, analyze information and events, and apply judgment in order to solve problems of both a routine and complex nature.
May be required to travel.
May be required to sit to perform deskwork or type on a keyboard.
Regularly required to hear and speak in order to effectively communicate orally.
Regularly required to stand, walk, and climb stairs to move about the campus.
Handle materials, reach overhead, kneel or stoop in order to conduct business.
Regularly lift 10 or fewer pounds.
Employee’s home work environment must be free of distractions and arranged to maximize Employee’s efficiency in performing work tasks and must include a reliable, high-speed internet connection.
Proof of a valid driver’s license, an acceptable DMV record, LU Driving Approval, and liability insurance is required when driving in the performance of the employee’s position.

Nice To Haves

GIAC technical certifications (GWAPT/GPEN/GRTP)
CompTIA technical certifications (Security+/CySA+/PenTest+)
Cloud certifications
experience with penetration testing, intrusion detection, vulnerability scanning, system integration, and poly-nimbus security concepts.

Responsibilities

Provide subject-matter expertise in web application security, advising teams on secure design, testing strategy, and risk mitigation.
Perform advanced manual and automated web application penetration testing on internally developed applications to identify, validate, and prioritize security vulnerabilities.
Contribute to the design, rollout, and continuous improvement of the internal penetration testing program.
Standardize penetration testing methods, documentation, workflows, reporting templates, and scoping guidelines.
Lead pre-engagement scoping sessions and collaborate with product teams to understand application architecture, functionality, and workflows.
Deliver clear, actionable findings and effectively communicate vulnerabilities to developers with varying security skill levels.
Partner with development teams to remediate issues, track findings, retest fixes, and ensure proper closure of vulnerabilities.
Stay current on emerging exploitation techniques, vulnerabilities, and defensive controls.
Support security incident investigations by documenting findings and evaluating the scope and impact of breaches to enable effective remediation and recovery.
Provide strategic guidance and technical expertise to design solutions that address identified security gaps, ensuring recommendations align with organizational goals and strengthen overall security posture.
Strictly adheres to Liberty University policies, representing the University in an exemplary manner.
Works effectively as a team member, embracing and fostering LU’s Christian model and Mission – Training Champions for Christ.
Develop/Lead penetration testing practice for IT security at Liberty University
Investigate and document security breaches; assess the damage they cause
Help design and architect solutions to identify security gaps
Provide strategic guidance for IT security technology implementation
Support a risk and opportunity-based approach to security services to optimize business outcomes
Assist and empower stakeholders to design and implement information security controls to meet control intent where no existing control or design patterns exist
Consult with department directors and management regarding security incidents
Drive security efficiency and capacity increases
Collaborate with different key stakeholders/departments on project implementation