Security Analyst

Emonics LLC; California; Remote; USD 80,000 - 130,000; Full time

Job summary

An established industry player is seeking a skilled Security Analyst to join their team. In this role, you will leverage your expertise in cybersecurity to guide and support critical business initiatives, ensuring robust application security across various platforms. You'll engage in penetration testing, application security assessments, and collaborate with cross-functional teams to enhance security measures. This position offers an opportunity to make a significant impact by identifying vulnerabilities and implementing effective risk mitigation strategies. Join a forward-thinking company that values innovation and teamwork, and help shape the future of cybersecurity.

Qualifications

• 8+ years of experience as Cybersecurity Analyst focused on Application Security.
• Bachelor’s degree in Information Systems Security or related field required.
• Strong knowledge of security standards such as NIST 800-53 and GDPR.

Responsibilities

• Perform Static and Dynamic Application Security Testing on various applications.
• Manage and execute security assessments for multiple projects simultaneously.
• Collaborate with teams to identify and remediate security vulnerabilities.

Skills

Cybersecurity Analysis

Application Security

Risk Analysis

Penetration Testing

Critical Thinking

Communication Skills

Network Protocols (TCP/IP)

Incident Response

Education

Bachelor's Degree in Information Systems Security

Significant experience in CyberSecurity

Tools

SIEM

EPM

DLP

Vulnerability Management Tools

Firewalls

WAFs

Antivirus Solutions

Job description

Telecommute

Position Summary

Under the direction of the Manager, Information Security Operations, the Engineer III – Security Analyst will use subject matter expertise to give guidance, best practices, and support to business and technology stakeholders during the deployment of critical business and technology initiatives. The role will have a deep understanding of global threat actors and their tactics, techniques, and procedures employed during cyber attacks.

The Security Analyst will be a subject matter expert in performing penetration testing, source code review for the development organizations and collaborate with teams to ensure proper remediation. The role will be responsible for application security testing on various types of applications such as Web, APIs, Thick Clients, Mobile, etc., inclusive of the supporting infrastructure components.

POSITION MAJOR FUNCTIONS

Duties and Responsibilities

• Perform Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST).
• Perform application security testing on various types of applications such as Web, APIs, Thick Clients, Mobile, etc., inclusive of the supporting infrastructure components.
• Leverage application artifacts such as business requirements, user stories, design documents, architecture documents to understand the testing scope and create targeted security user stories or misuse cases.
• Manage and execute security assessments for multiple projects simultaneously and ensure project timelines are met.
• Identify opportunities for process improvements and automation.
• Analyze source code to mitigate identified weaknesses and vulnerabilities within the system.
• Manage firewalls, network and host intrusion prevention/detection systems, virtual private networks, threat intelligence platforms, endpoint protection, security training platforms, email security, forensic tools, public/private/hybrid cloud infrastructure, identity and access management systems, and physical security systems.
• Collect and aggregate information from a wide variety of sources and formats for relevance to our environment; monitor and provide metrics on threat level of vulnerabilities.
• Contribute and participate in team activities and planning in regard to improving team skills, awareness, communication, reputation, and quality of work.
• Monitor security operations center tools and dashboards.
• Perform threat hunting activities using security operations center tools.
• Assist with risk analysis activities.
• Assist with designing and implementing controls to mitigate risk.
• Collaborate and communicate with Compliance, Internal Audit, the Business teams, and others to identify, analyze, and communicate risk; and provide support around vulnerability management within their business requirements.
• Identify, develop, and implement mechanisms to detect vulnerabilities and how they may lead to corporate incidents in order to enhance compliance with and support of security standards and procedures.
• Respond to tickets and incidents in a proactive manner.
• Coordinate with the Incident Response team to remediate security incidents as needed.
• Understand compliance requirements that may impact security and effectively collaborate with business areas and project teams to develop security solutions that address these requirements.
• Assume a leadership role in advocating internally and externally for compliance to security measures to protect corporate applications and environments.
• Work with information systems owners and administrators to understand their security needs and assist with implementing practices and procedures consistent with security policies.
• Build and maintain supplier partnerships to further the company mission and goals.
• Maintain current knowledge of industry trends and standards.
• Create and maintain environmental documentation, tasks, change records, etc.
• Perform other duties as assigned.

MINIMUM REQUIRED QUALIFICATIONS TO PERFORM POSITION

Experience Requirements

• 8+ years of experience as Cybersecurity Analyst with focus on Application Security.
• Bachelor’s degree in Information Systems Security or related degree.
• In-depth knowledge of security monitoring and incident response.
• In-depth knowledge of risk analysis and risk mitigation strategies.
• Full understanding of networking technologies and networking protocols with an emphasis on TCP/IP.
• Understanding of Defense in Depth strategies.
• Understanding of Security Operations Tools such as SIEM, EPM, DLP, Vulnerability Management, Firewalls, WAFs, Antivirus Solutions, Email Protection Solutions, Incident Response and Threat Management.
• In-depth knowledge of computer operating systems such as Windows, MacOS, and Linux.
• Understanding of database administration and application development life cycle regarding cybersecurity.

Educational Background

Bachelor's Degree with a major in a computer-related field or similar technical field from an accredited institution required. Significant experience may be considered in lieu of degree, with a minimum of 10 years of experience in CyberSecurity with a focus on Application Security.

Professional Certification

Security-related certifications such as Microsoft MTA, ISACA CSX, CompTIA Security+, GIAC GISF, or ISC 2 SSCP or higher-level certifications.

Knowledge

• Computer forensics knowledge and experience.
• Understanding of security standards such as NIST 800-53, GDPR, and others.
• Experience working with Identity and Access Control Management Tools.

Skills

Strong planning, organization, critical thinking, decision-making, and communication (verbal and written) skills.

Abilities

Projects involving lifting server appliance weights up to 50 lbs. and heavy eye strain with computer monitors.