Cloud Security Analyst 442560

Engineers must have the following:
• 3-5 years of Cyber Security experience
• Familiarity with Web Application Security standards (OWASP, MITRE)
• Experience with application security technologies including SCA/SAST/DAST and the ability to identify false positives and assist with remediation planning
• Previous experience integrating security tools in CI/CD development pipelines
• Excellent verbal and written communications

Preferred candidates should have:
• 5+ years Cybersecurity experience
• Professional certification (CISSP, CCSP, GWAPT, GWEB, AWS SA / Certified Security, etc.)
• 1-3 years working directly with Cloud Infrastructure as code (CFT, TF) in AWS
• Familiarity with ServiceNow VM and GRC modules
• Development of automation and scripting 8-10 years experience.

Position’s Contributions to Work Group:

• AKA: Cloud Security Analyst. The Cloud Operations Security Team supports the Digital development community by providing Administration and SME responsibilities for the DevSecOps tools. Assisting the development teams in identifying and remediating vulnerabilities discovered during the development lifecycle.
• Setting guidelines, auditing, and compliance of supported tools

Requirements

Technical Skills

• Significant knowledge of security best practices for Secure Software Development Lifecycle, vulnerability management, risk remediation
• Basic knowledge of AWS systems, including EC2, IAM, CloudWatch, CloudTrail, Config, Lambda, Security Groups, VPCs, WAF, Guard Duty, Inspector, etc.
• Experience with cloud-based vulnerability management tools (Prisma, Fortify, GitHub Advanced Security)
• Experience extracting pertinent security data from SAST and DAST Tools
• 3-5 years of Cyber Security experience
• Familiarity with Web Application Security standards (OWASP, MITRE)
• Experience with application security technologies including SCA/SAST/DAST and the ability to identify false positives and assist with remediation planning
• Previous experience integrating security tools in CI/CD development pipelines
• Excellent verbal and written communications

Desired Skills

• 5+ years Cybersecurity experience
• Professional certification (CISSP, CCSP, GWAPT, GWEB, AWS SA / Certified Security, etc.)
• 1-3 years working directly with Cloud Infrastructure as code (CFT, TF) in AWS
• Familiarity with ServiceNow VM and GRC modules
• Development of automation and scripting 8-10 years experience.