IT Security Analyst (Software)

Work Location: Asheville, NC
Job Code: 1850

Description

Position Description
Will be a member of the IT security team and primarily responsible for reviewing code (Java, Python, PHP, Groovy, JavaScript, and others) for security vulnerabilities. Will analyze information security systems, provide recommendations, and develop security measures to protect information against unauthorized modification or loss.  Will work on a variety of complicated tasks and a wide degree of creativity and latitude is expected. Specific duties include:

  •  Evaluating and advising on the security disposition of Commercial off the shelf (COTS) products, as well as other 3rd party provided libraries and extensions.
  •  Reviewing software build mechanisms and deployment procedures.
  •  Developing and providing IT Security Training regarding secure code development practices.
  •  Maintaining security documentation, and auditing for compliance.
  •  Assisting with the monitoring and analysis of system logs and events.

Required Skills
3 - 6 years of software development experience in two or more major programming languages, with at least one being object-oriented.  Knowledge of secure coding concepts and common vulnerabilities. Software testing experience.  Proficient with Linux/UNIX. Must have good written and verbal communication skills.

Experience in the following areas will be desirable

  •  Application security: static code analysis, dynamic application scanning and penetration testing.
  •  Training and advising developers in secure coding practices.
  •  Systems and/or network administration
  •  Maintaining FISMA System Security Plan documentation & compliance in accordance with NIST Special Publications and Federal Information Processing Standards (FIPS).
  •  Continuous monitoring, vulnerability management and network security monitoring.
  •  Certifications in Information Systems and Security such as A+, Security+, CISSP, CEH, etc. may be considered as qualifying factors.

Must be a US Citizen or Permanent Resident and be able to pass a background investigation to obtain a security badge to enter the applicable government facility.

Education
BS in computer science, related discipline, or equivalent work experience.

 





Are you a returning applicant?

Previous Applicants:

If you do not remember your password click here.

Back to Search Results

New Search


Powered By Taleo