Analyst Security ERC

Profile

**MEMBERS ONLY**SIGN UP NOW***.
**MEMBERS ONLY**SIGN UP NOW***. places the highest importance on the confidentiality, availability and integrity of customer, company and employee information. As a member of **MEMBERS ONLY**SIGN UP NOW***.’s Enterprise Information Protection team, you will play a critical role to ensure that customer, company and employee information is secure while enabling technology and business partners throughout **MEMBERS ONLY**SIGN UP NOW***. to innovate, drive sales and provide superior customer care in our stores, online and through our various contact channels.
The Analyst, Security ERC will learn to perform penetration testing on **MEMBERS ONLY**SIGN UP NOW***. web applications, web services, mobile applications, devices, and systems, both on prem and in a multi-cloud environment. The Analyst will learn build threat models to identify security weaknesses, on a per engagement basis, across **MEMBERS ONLY**SIGN UP NOW***.’s technology portfolio. This role will be responsible for security services delivery, including the use of application security tools for detection and remediation of security weaknesses. The Analyst will partner with more experience team members for guidance related to assessment methodology, as well as **MEMBERS ONLY**SIGN UP NOW***. development and business teams to explain security weaknesses and provide guidance for remediation.
**MEMBERS ONLY**SIGN UP NOW***. is seeking a highly-motivated, self-starter with a demonstrated passion for technology, or cybersecurity, to learn to perform security assessments across a wide range of systems. This role will have opportunity to learn, help improve **MEMBERS ONLY**SIGN UP NOW***.’s security posture and work with a talented and diverse team of industry experts.
This role reports to the Sr. Manager of Application Assessment.
Responsibilities:
Perform penetration testing on **MEMBERS ONLY**SIGN UP NOW***. Applications and Systems.
Assess and report security weaknesses and their risk according to **MEMBERS ONLY**SIGN UP NOW***.’s application penetration testing methodology.
Configure and operate security assessment tools.
Perform personal research to stay current on security trends, new vulnerabilities, and technology.
Document identified security weaknesses in **MEMBERS ONLY**SIGN UP NOW***. systems and provide detailed reports to appropriate development and business teams.
Develop and share a point of view on risk-based, cost-effective remediation options for identified security weaknesses.
Work directly with **MEMBERS ONLY**SIGN UP NOW***. development teams to provide remediation guidance for identified security weaknesses.
Provide technical mentorship to senior analysts and peers.
Brief EIP Application Security leadership on assessment results, activities performed, and evaluation of potential risks.
Identify testing methodology or process improvements and make recommendations to EIP Application Security leadership on improvements
Basic Qualifications:
Intermediate understanding of one or more of the following areas: cybersecurity, networking, desktop / endpoint management, software development, IT, etc.
Preferred Qualifications:
Industry relevant certifications or training.
Familiarity with one or more popular web application languages, scripting languages and / or platforms. For example, JavaScript, HTML, .NET, Java or other similar technologies.
Knowledge of SQL database architectures and query languages.
802.11/Wireless penetration testing.
Understanding of enterprise network architecture and TCP/IP protocols.

Company info

Sign Up Now - WashingtondcCrossing.com