Info Security Analyst

Company: AgreeYa Solutions
Location: Dallas
Posted on: July 1, 2020

Job Description:

We have an opening that you might be interested in. Please carefully read the Job Description below, and if you would like to pursue this opportunity please email me an updated MS Word version of your resume and call me at your earliest convenience. I appreciate your time and look forward to hearing from you. If you are currently on a project that is about to end in the next few months then please do share your profile along with your availability. I will reach out to you when the time comes. Job Designation - Info Security Analyst Job Location - Dallas, TX Job Type - Contract Job Description- In one sentence Assess open vulnerabilities and the root cause to recommend remediationmitigation disposition and estimate of effort and dependencies for current backlog. Expertise with Veracode, Qualys and other vulnerability reports analysis and providing guidelines to development team for vulnerability conflicts resolutions What will your job look like? Expertise ndash Has full autonomy to deliver agreed technical objectives. Makes decisions requiring extensive analysis and interpretation, including a number of intangible factors. Provides technical expertise in terms of software usage, and functional and non-functional aspects (such as operability, performance, aesthetics, resilience, reuse, maintainability, comprehensibility, economic, and technological tradeoffs). Design - Works with software engineers and other architects to define and refine the product structure to align with the business, development, deployment, and maintenance needs. Works with customers and product line management to identify, refine, and translate customer needs into concrete technical requirements. Understands and plans for architecture evolution including integration of new software technologies. Takes accountability for product and application architecture. Supports and leads architectural decisions and tasks within a product line or across multiple product lines (cross-portfolio). LeadershipProfessional Guidance - Works with the software engineering teams to establish best practice guidelines and reusable and production-ready solutions. Leads projects, reviews technical designs, and provides guidance to software engineers on technical and architectural design decisions. Is an ambassador for the architecture, ensuring that it is being implemented correctly. Gives feedback and inputs to the product management team to consider and improve the product line. Leadership is focused on the technical aspects of the job, rather than the people management aspects. Standards and Best Practices - Researches, evaluates, and prototypes new methodologies, technologies, and products. Provides leadership in the use of processes and tools. Proposes and follows through with improvements in processes and tools. Ensures effective application of corporate standards and procedures. Proposes improvements and tracks and provides updates about pertinent technology trends. Customer Engagement - Obtains a good understanding of the customer context while making technical decisions and choices. Interacts effectively with customers as required. Provides the development or support team with inputs and requirements related to the technical aspects of the solutionproduct. All you need is... 6+ years of Extensive background in software engineering and proven experience in software design. Experience using Veracode, Qualys and other vulnerability identification tools Application Vulnerability Assessments (Source code review Java) Experience in Security tools and products (Fortify, AppScan, etc.) Experience with Security testing tools like SAST (Veracode, CheckMarx) and DAST (IBM App Scan) tools. SAST - Static Application Security Testing, DAST Dynamic Application Security Testing Deep understanding of application security vulnerabilities and threat and mitigations. Familiar with OWASP top ten security risks, like injection, cross-site scripting, weak encryption, broken authentication, etc. Technical capability to in Java and .NET to distinguish between false and true positive vulnerability, and to direct developers on how to prevent and mitigate security threats. Ability to follow and train organization on security measures and procedures Detail oriented Problem-solving capabilities Certifications for Vulnerability assessors preferred Experience in Financial industry and banking domain preferred Excellent communication skills Why you will love this job You will be able to use your specific insights and deep knowledge of customers' business environments to influence decisions impacting customer to optimal solution design. You will be a key member of a global, dynamic and highly collaborative team with various possibilities for personal and professional development You will have the opportunity to work in multinational environment for the global market leader in its field Note Please allow me to reiterate that I chose to contact you either because your resume had been posted to one of the internet job sites to which we subscribe, or you had previously submitted your resume to us, I assumed that you are either looking for a new employment opportunity, or you are interested in investigating the current job market. If you are not currently seeking employment, or if you would prefer I contact you at some later date, please indicate your date of availability so that I may honor your request. Thanks!

Keywords: AgreeYa Solutions, Dallas , Info Security Analyst, Professions , Dallas, Texas