Senior Application Security Analyst
Washington, DC
GCyber
GCyber, a leading government IT contractor, specializes in empowering U.S. Defense and Federal agencies with cutting-edge technology solutions. We provide top-tier Infrastructure and Operations, Security and Risk Management, and Portfolio &...GCyber is hiring a Senior Application Security Analyst, for high profile government contract.
As a Senior Application Security Analyst, you will,
- Identify unsecure transactions between components, risky management, and porous defenses as well as compliance with existing federal or customer-specific policy and regulations.
- Work with the Customer to develop a secure code policy that ensures the health, security, and compliance of the application portfolio and for leading the establishment of a plan for automated code analysis that incorporates security code scanning throughout the development lifecycle
- Apply your expertise in application security to perform application security testing on portfolio of cloud applications (e.g., static / dynamic)
- Evaluate existing application security policies and toolsets
- Provide recommendations to improve efficiency through simplified processes and increased automation.
- Work with the Cloud Architect and enterprise applications team to build automated code analysis and testing into the CI/CD pipeline.
- Review code repository for vulnerabilities and provide impact to the organization with solutions where possible
- Conduct risk evaluations on open-source software and provide impact from risks
- Work with software developers to address high risk findings and provide recommended solutions
Minimum Qualifications and Experience:
- Active TS/SCI clearance
- BA/BS Degree in Information Technology, Cybersecurity, or a related field (6 years additional experience may be substituted for a degree)
- 7+ years of experience including hands on knowledge and experience performing application security assessments.
- DoD 8570 IAT II Certification (Security+, CySA+, CCNA-Security, CND, GICSP, GSEC, SSCP)
- Excellent verbal and written communication skills.
- Experience drafting and/or supporting the development of cybersecurity policies in Federal Government environments.
- Proactive and solutions-oriented, willing to take initiative to recommend and collaborate across functional teams execute improvements
For future job notifications please follow GCyber on LinkedIn. https://linkedin.com/company/gcyber
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Application security Automation CI/CD Clearance Cloud CND Code analysis Compliance DoD DoDD 8570 GICSP GSEC Security assessment SSCP TS/SCI Vulnerabilities
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.