Associate Web Application Security Specialist

Vans; Spicewood (NC); On-site; USD 72,000 - 90,000; Full time

Job summary

VF Corporation is seeking an Associate Web Application Security Specialist, Attack Surface Management to help identify and secure VF’s external assets across the global enterprise. You will oversee the Attack Surface program from a technical perspective and work with technology and business teams to reduce exposure.

The role requires 1–3 years of relevant security experience, strong communication and writing skills, and knowledge of OWASP Top 10.

Qualifications

• 1–3 years of relevant experience
• Strong written and verbal communication
• Ability to work independently and with others
• Demonstrated ability to manage project details and governance processes
• Technical writing skills required
• Familiarity with IT governance and architecture standards
• Knowledge of OWASP Top 10 and secure development practices

Responsibilities

• Oversee the Attack Surface Management program from a technical perspective
• Regularly identify and catalogue VF's assets to maintain an up-to-date inventory
• Coordinate with stakeholders to ensure understanding of the attack surface and drive risk reduction
• Serve as a subject matter expert for application development and infrastructure teams
• Analyze security policies and configurations to identify weaknesses and vulnerabilities
• Participate in creating processes to reduce risk and advocate new security solutions
• Establish communications on threats, vulnerabilities, and risks across a global landscape
• Escalate high or critical risks to the proper channels and promote security best practices

Skills

Project management

Communication

Problem-solving

Independent work

Technical writing

IT governance

OWASP Top 10

Job description

At VF, we strive to foster a culture of belonging based on respect, connection, openness, and authenticity. So, before we get to the job details, take a minute to learn a little more about us – our values and our culture - visit VF Careers or www.vfc.com.What will you do?A day in the life of an Associate Web Application Security Specialist, Attack Surface Management at VF looks a little like this.As a member of the Application Security team, you will be a key member of the team looking across the VF Global enterprise looking for threats and vulnerabilities that would potentially or unnecessarily place the company at risk.Working with the different teams within VF you will oversee the discovery of VF’s external assets and evaluate their security posture. You will work with both technology and business teams to reduce external risk exposure.Let’s break down that day-in-the-life a bit more.Oversee the Attack Surface Management program from the technical perspectiveRegularly identify and catalog all assets, including new and existing ones, to maintain an up-to-date inventory of VF’s attack surfaceCoordinate with various stakeholders to ensure a comprehensive understanding of the attack surface and facilitate effective risk reductionServe as a subject matter expert for application development and infrastructure teamsAnalyze organization's cyber defense policies/configurations and evaluate weaknesses and vulnerabilitiesParticipate in the creation of effective and efficient processes to drive successful reduction of risk within VFResearch and advocate for new security solutions and technologiesEnsuring the highest levels of security practices are maintained by VF through projects, implementationsEstablish communications with associates related to threats, vulnerabilities, processes and security risks across a Global landscapeEscalate as necessary high or critical risks, threats or vulnerabilities to the proper channels for resolutionAdvocate and evangelize the importance of Application Security within VF and socialize through internal channelsWhat do you need to succeed?We all have unique skills that we bring to work and celebrate every day. For this role, there are foundation skills you’ll need to succeed and excel. Additionally, while formal education in a related field is great to have, we are most interested in your 1-3 years of experience and professional achievements.The foundation skills you will need in this position are:Project management skillsExcellent communication skills and problem-solving abilityDemonstrated ability to work independently and with othersAbility to manage the details and compliance with standards and expectationsDemonstrate technical writing skillsFollows all defined IT standards and processes (i.e. IT Governance, SM&G, Architecture, etc.), and provides input for improvements to the appropriate process owners as neededMaintains a proper balance between business and operational riskFollow the defined project management standards and processesKnowledge of operating systems, ports, and servicesKnowledge of the OWASP top 10Now WE have a question for YOU.Are you in?Hiring Range:$72,000.00 USD - $90,000.00 USD annuallyIncentive Potential: This position is eligible for additional compensation awards that may include an annual incentive plan, sales incentive, or commission potential. Specific details of the additional compensation eligibility for this position will be provided during the recruiting and interview process.Benefits at VF Corporation: You can review a general overview of each benefit program offered, including this year's medical plan rates on www.MyVFbenefits.com and by clicking Looking to Join VF? Detailed information on your benefits will be provided during the hiring process.Please note, our hiring ranges are determined and built from market pay data. In determining the specific compensation for this position, we comply with all local, state, and federal laws.At VF, we value a diverse, inclusive workforce and we provide equal employment opportunity for all applicants and employees. All qualified applicants for employment will be considered without regard to an individual’s race, color, sex, gender identity, gender expression, religion, age, national origin or ancestry, citizenship, physical or mental disability, medical condition, family care status, marital status, domestic partner status, sexual orientation, genetic information, military or veteran status, or any other basis protected by federal, state or local laws. If you require accommodations during the application process, please contact us at [e-mail]. VF will provide reasonable accommodations for qualified individuals to the extent required by applicable law.Pursuant to all applicable local Fair Chance Ordinance requirements, including but not limited to the San Francisco Fair Chance Ordinance, VF will consider for employment qualified applicants with arrest and conviction records.