Responsibilities:

• Work with sensitive and confidential information while maintaining the highest level of confidentiality, professionalism, and ethics
• Maintain documented procedures and follow industry best practices while conducting application and server security testing under supervision
• Performing assessments of System Development Life Cycle (SDLC) processes
• Be willing to learn new programming languages, frameworks, tools and paradigms given proper guidance and supervision
• Contribute to helping application teams learn industry security tradecraft

Requirements:

• Pursuing a B.S degree in Computer Science, Information science or a similar field or graduated and pursuing a M.S. degree.
• Some experience in or understanding of software development in one or more of the following languages / frameworks: Java / Spring, Python, Angular, React
• Comfortable working on Windows and Linux machines (RHEL, CentOS, Ubuntu)
• Strong ethics and understanding of ethics in business and information security
• Some experience performing code reviews
• Collaborate with both internal and external partners to develop and update Security Operations standards, procedures, guidelines, and best practices
• Ability to complete tasks and deliver professionally written oral reports to clients at all levels of the organization
• Developing and reporting of key information, metrics, security performance, and driving enterprise processes
• Excellent communication, collaboration, and strong project management skills
• US Citizenship Required

Additional Skills:

• Possesses current security certification(s) or is working towards one
• Basic understanding of DevOps technologies such as Jenkins, Puppet, Chef
• Basic understanding of Containerization technologies like Docker, Kubernetes etc..
• Experience with some web application vulnerability scanning tools (e.g., Tenable/Nessus, OWASP ZAP, Burp Suite)
• Some experience with Cloud technologies (AWS, Azure or GCP)