Navy Federal Credit Union-posted 4 months ago
Intern
5,001-10,000 employees

Application Whitelisting is a team within the Service Transition group of NFCU’s Enterprise Technology Services (ETS). The team manages policies, standards, and processes that govern the use of applications—from inception to retirement—within NFCU compute environments. "Applications" include executables, libraries, scripts, macros, browser plug-ins (or add-ons/extensions), configuration files, and application-related registry entries. The team’s primary responsibility is to review, enhance, and implement controls that ensure applications used within NFCU comply with key security policies and standards. A key outcome is the prevention of unauthorized or unvetted software execution on desktops and servers, reducing exposure to security vulnerabilities. This role offers exposure to enterprise security practices, application lifecycle management, and cross-functional collaboration with IT and security teams.

  • Analyze and categorize application data from tools such as Microsoft Defender, Black Duck, and Checkmarx to identify inconsistencies and build a centralized whitelisting inventory.
  • Design and automate reporting mechanisms for whitelisting status, risk scores, and ownership to improve visibility and decision-making.
  • Collaborate with ServiceNow and CMDB teams to validate data ingestion, resolve discrepancies, and align with enterprise architecture standards.
  • Support attestation workflows and governance discussions to ensure whitelisting policies align with enterprise standards and reduce risk exposure.
  • Develop scripts and APIs to automate data integration and streamline inventory maintenance.
  • Present findings, process improvements, and recommendations to leadership, contributing to the formalization of the whitelisting service.
  • Currently enrolled in an accredited college or university.
  • Anticipated graduation date of December 2026 or later.
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service