Job Details

ID #22171756
Estado New York
Ciudad Newyorkcity
Tipo de trabajo Contract
Salario USD DOE DOE
Fuente Trigyn Technologies, Inc.
Showed 2021-11-04
Fecha 2021-11-03
Fecha tope 2022-01-01
Categoría Etcétera
Crear un currículum vítae

Cybersecurity Analyst

New York, Newyorkcity, 10001 Newyorkcity USA

Vacancy caducado!

Trigyn's direct client is looking for an experienced Cybersecurity analyst with demonstrated hands-on experience. The successful candidate will possess strong knowledge and experience in various IT security domains with a focus on web application security and current application information security threats, as well as networking, and network security.

Scope of Work: Perform web application threat modeling, code and security architecture reviews, and develop mitigation strategies. Formulate assessment reports outlining identified information security vulnerabilities, potential impact; provide and prioritize actionable recommendations, and estimate remediation effort levels. Liaise with internal ICT groups and other constituencies including counterparts in partner organizations, and third-party security service providers on the issues relating to the web application security. Work closely with ICT asset owners and other stakeholders on formulation of the prioritized remediation actions plans. Contribute to the ongoing enhancement of the Organizations web application vulnerability assessment capabilities through the development and implementation of improved methodology, processes, and tools. Mentor team members on web application assessment methodologies and techniques. Support project owners in the definition of cybersecurity requirements. Provide expert advice on the security architecture and configuration of complex systems. Prepare technical reports and documentation as required. Provide cybersecurity training to end users, project owners and ICT professionals, and raise awareness of cybersecurity issues. Analyse root causes of significant information security incidents and propose additional preventive controls and operational improvements ("lessons learned").

Experience:

3-4 years of progressively responsible experience in information security including security architecture, web application vulnerability assessments and penetration testing. Experience with performance of code and security architecture reviews Development and/or vulnerability testing experience with web frameworks and programming including HTML, Javascript, .NET, ASP, PHP, WordPress, and Drupal. Experience with scripting languages such as bash, Perl, Python, PowerShell. Knowledge of SDLC and DevSecOps practices, common security requirements within .NET, single page applications (SPAs), and similar frameworks. Knowledge of the ISO27000, ITIL and CobiT frameworks, cyber risk management methodologies, or the OWASP web application testing methodology. Knowledge of network security, current information security threats and incident management concepts and practices. Excellent technical skills. Excellent analytical skills. Excellent interpersonal and communication (verbal and written) skills. Ability to work in a multi-cultural environment. Ability to work in an organized and logical manner. Ability to work well under pressure. Certifications like CISSP, CEH, GPEN, GWAPT, GXPN, GWEB, GSSP-JAVA, GSSP-.NET are desirable.

Description KPI 1. Perform security assessments of web-based applications including threat modeling, vulnerability assessments, and penetration testing

2. Formulate assessment reports outlining identified information security vulnerabilities, potential impact; provide and prioritize actionable recommendations, and estimate remediation effort levels.

3. Liaise with internal ICT groups and other constituencies including counterparts in partner organizations, and third-party security service providers on the issues relating to the web application security

For Immediate Response call or send your resume to

TRIGYN TECHNOLOGIES, INC. is an EQUAL OPPORTUNITY EMPLOYER and has been in business for 30 years. TRIGYN is an ISO 9001:2015, ISO 27001:2013 (ISMS) and CMMI Level 5 certified company.

Vacancy caducado!

Suscribir Reportar trabajo