Information Security Analyst

JPS Tech Solutions Pvt Ltd; Cary (NC); Presencial; USD 90 000 - 130 000; Tempo integral

Resumo da oferta

JPS Tech Solutions Pvt Ltd in Cary, NC seeks an experienced Information Security Analyst with 5+ years in application security, code analysis, and vulnerability management. You will analyze scan results from Veracode and SonarQube, perform manual code reviews, and guide remediation with development teams to strengthen secure coding practices.

Responsibilities include translating findings into Jira stories in SAFe, maintaining security policies in Confluence, and reporting status to the

Qualificações

• Minimum 5+ years of experience in Information Security, Application Security, or Vulnerability Management.
• Strong experience in manual code audits, code reviews, vulnerability analysis, and remediation.
• Hands‑on experience with Veracode and SonarQube for code scanning and security assessments.
• Strong knowledge of Java programming and secure coding practices.
• Knowledge of OWASP Top 10, CERT/CC, MITRE, Sun, and NIST security standards and guidelines.
• Experience with Atlassian tools, including Jira, ServiceDesk, and Confluence.
• Understanding of authentication, authorization, session management, and secure communication protocols.
• Experience with Windows and Linux operating systems.
• Experience working with Oracle and Microsoft SQL Server databases.
• Knowledge of third‑party library security analysis and vulnerability identification.
• Strong analytical, troubleshooting, communication, and collaboration skills.

Responsabilidades

• Analyze code scan results from Veracode and SonarQube and identify security vulnerabilities.
• Perform manual code reviews, security audits, and vulnerability assessments.
• Assess security risks and prioritize remediation based on severity and business impact.
• Convert security findings into actionable user stories and tasks in Jira, following SAFe practices.
• Develop and maintain security policies, procedures, and best practices in Confluence.
• Monitor remediation progress and validate fixes through subsequent code scans.
• Collaborate with development teams to implement secure coding practices.
• Provide regular security status reports and progress updates to the Information Security Manager.
• Identify security risks in third-party libraries and application dependencies.
• Support application security improvements across development and deployment processes.

Conhecimentos

Application Security

Vulnerability Management

Manual Code Audits

Code Reviews

Security Risk Assessment

Communication & Collaboration

SAFe practices

Ferramentas

Veracode

SonarQube

Jira

ServiceDesk

Confluence

Oracle

Microsoft SQL Server

Windows

Linux

Descrição da oferta de emprego

Job Summary

We are seeking an experienced Information Security Analyst with 5+ years of experience in application security, source code analysis, and vulnerability management. The role focuses on analyzing security scan results, identifying code vulnerabilities, prioritizing remediation efforts, and collaborating with development teams to strengthen application security.

Key Responsibilities

• Analyze code scan results from Veracode and SonarQube and identify security vulnerabilities.
• Perform manual code reviews, security audits, and vulnerability assessments.
• Assess security risks and prioritize remediation based on severity and business impact.
• Convert security findings into actionable user stories and tasks in Jira, following SAFe practices.
• Develop and maintain security policies, procedures, and best practices in Confluence.
• Monitor remediation progress and validate fixes through subsequent code scans.
• Collaborate with development teams to implement secure coding practices.
• Provide regular security status reports and progress updates to the Information Security Manager.
• Identify security risks in third-party libraries and application dependencies.
• Support application security improvements across development and deployment processes.

Required Qualifications

• Minimum 5+ years of experience in Information Security, Application Security, or Vulnerability Management.
• Strong experience in manual code audits, code reviews, vulnerability analysis, and remediation.
• Hands‑on experience with Veracode and SonarQube for code scanning and security assessments.
• Strong knowledge of Java programming and secure coding practices.
• Knowledge of OWASP Top 10, CERT/CC, MITRE, Sun, and NIST security standards and guidelines.
• Experience with Atlassian tools, including Jira, ServiceDesk, and Confluence.
• Understanding of authentication, authorization, session management, and secure communication protocols.
• Experience with Windows and Linux operating systems.
• Experience working with Oracle and Microsoft SQL Server databases.
• Knowledge of third‑party library security analysis and vulnerability identification.
• Strong analytical, troubleshooting, communication, and collaboration skills.

Preferred Qualifications

• Certifications such as CISSP, CSSLP, or CEH.
• Experience with automated security testing tools and CI/CD pipelines.
• Knowledge of Python, C++, or C#.
• Familiarity with cloud security practices and securing cloud-based applications.

Core Technical Skills

• Application Security and Vulnerability Management
• Veracode and SonarQube
• Java and Secure Code Review
• OWASP Top 10, CERT/CC, MITRE, and NIST
• Jira, ServiceDesk, and Confluence
• Oracle and Microsoft SQL Server
• Windows and Linux
• Third-Party Library Security Analysis
• CI/CD and Automated Security Testing