Technical Application Security Assessor

Profile

**MEMBERS ONLY**SIGN UP NOW***.
This role is remote eligible.
**MEMBERS ONLY**SIGN UP NOW***. is seeking an experienced and motivated individual interested in performing security assessments across a wide range of systems. This role will have opportunities to expand professionally through training and research opportunities to expand their technical skillset to include testing of Internet of Things (IoT) devices, specialized devices (robots, kiosks, registers, etc), and infrastructure systems.
This role reports to the Associate Director of ERC, Leadership.
Responsibilities:
Perform penetration testing on **MEMBERS ONLY**SIGN UP NOW***. Applications and Systems.
Assess and report security weaknesses and their risk according to **MEMBERS ONLY**SIGN UP NOW***.’s application penetration testing methodology.
Configure and operate security assessment tools.
Perform personal research to stay current on security trends, new vulnerabilities, and technology.
Document identified security weaknesses in **MEMBERS ONLY**SIGN UP NOW***. systems and provide detailed reports to appropriate development and business teams.
Develop and share a point of view on risk-based, cost-effective remediation options for identified security weaknesses.
Work directly with **MEMBERS ONLY**SIGN UP NOW***. development teams to provide remediation guidance for identified security weaknesses.
Provide technical mentorship to senior analysts and peers.
Brief EIP Application Security leadership on assessment results, activities performed, and evaluation of potential risks.
Identify testing methodology or process improvements and make recommendations to EIP Application Security leadership on improvements
Basic Qualifications:
5 years of direct full-time information security, penetration testing, software development, or software engineering.
Familiarity with popular web application languages and platforms. For example, JavaScript, HTML, .NET, Java or other similar technologies.
Understanding of application security vulnerabilities, testing techniques, and the OWASP framework.
Experience with intercepting proxies, dynamic analysis tools, or static analysis tools.
Knowledge of secure development of web applications, mobile applications or thick client applications.
Preferred Qualifications
Industry relevant certifications or training.
Knowledge of SQL database architectures and query languages.
802.11/Wireless penetration testing.
Deep understanding of enterprise network architecture and TCP/IP protocols.
Bachelors or advanced degree in Information Systems, Computer Science, Software Engineering, Computer Engineering or an equivalent field. Equivalent direct work experience acceptable.

Company info

Sign Up Now - WashingtondcCrossing.com