Vulnerability IT Analyst - St. Louis, MO

Company: Preferred Resources, Inc.
Location: Saint Charles
Posted on: February 16, 2021

Job Description:

*Remote role to start but will need to relocate to the St. Louis area once Covid-19 restrictions end Overview Seeking a IT Vulnerability Analyst with experience in static application security testing (SAST) and software composition analysis (SCA). Candidate must have experience in performing application security code review and vulnerability management. Experience with black box, grey box, and white box penetration testing is desired. Ideal candidates will have a Development Background, Secure code review (ex: Checkmarx SAST/SCA), and/or Builder Tools experience (ex: Artifactory/Xray, Bitbucket, Jenkins). Responsibilities --- Conducting application security assessments, secure source code review, secure software composition analysis of applications (web, mobile, web service, etc.). These assessments involve manual testing and analysis as well as the use of automated application vulnerability scanning/testing tools. --- Assist in the development, evaluation, implementation of application security testing, secure Container/Kubernetes infrastructure, orchestration, vulnerability management process and tools --- Research and keep up to date with application security threats, techniques, tools, trends and threat mitigation strategies --- Able to assist in setting the strategic direction for application security and vulnerability management programs across the firm --- Responsible for all project documentation, including maintaining technical documents and business requirements --- Takes lead on medium size projects --- Creates business and technical requirements on projects that defines getting to implementation --- Strong communication skills and technical skills with the ability to communicate between business and technical teams --- Responsible for understanding security policies and industry best practices & compliance Experience --- Hands-on experience in secure source code review, software composition analysis and vulnerability management for web, mobile and network systems --- Hands-on experience in artifact build and management, software composition analysis and vulnerability management for container, cloud and web applications --- Prior experience in Programming & Scripting such as Java, Groovy, Python and PowerShell is preferred --- Knowledge of secure software development life cycle (SSDLC), DevSecOps, Cloud, CI/CD pipeline and SSDLC process Automation is desired --- Knowledge of OWASP, SANS, or other security-related frameworks and penetration testing methodologies --- Current knowledge of application security best practices, common exploits and threat landscape --- Experience with application threat modeling or other risk identification techniques --- Strong relationship building skills and collaborative style to enable success across multiple partners desired --- The preferred candidate should be familiar with laws, regulations, and industry standards such as PCI DSS, GDPR, CCPA, GLBA, NIST SP800-53 and Cybersecurity Framework, and International Organization for Standardization (ISO) series 27001/2, 27005, 31000.
12 month contract to start - potential to extend or convert to Perm. Full benefits package available.

Keywords: Preferred Resources, Inc., Saint Charles , Vulnerability IT Analyst - St. Louis, MO, Professions , Saint Charles, Missouri