Job details
Job type full-time
Full job description
#location - us/remote
About iconectiv
Your business and your customers need to access and exchange information simply, seamlessly and securelyIconectiv’s extensive experience in information services and its unmatched numbering intelligence helps you do just thatIn fact, more than 2b people count on our platforms each day to keep their networks, devices and applications connectedOur cloud-based software as a service (saas) solutions span network and operations management, numbering, trusted communications and fraud preventionFor more information, visit www.iconectiv.comFollow us on twitter and linkedin.
Responsibilities:
The information security, application and system testing analyst will be responsible for maintaining a fully mature enterprise-wide it application and system security testing programThis role is challenged with the responsibility of identifying and safeguarding applications, systems, and emerging technologies while applying information security best practicesIn addition, this role will be responsible for enhancing a robust cyber security software development lifecycle (sdlc)This position will also have operational responsibility in the disciplines of: vulnerability management; incident response; malware analysis; audit and compliance schedules; security best practices to large database and high-transaction software systems in the telecommunications space; advancing the program development of key risk and performance indicators with documented metrics.
Some essential functions of the role include, but are not limited to the following:
Work with sensitive and confidential information while maintaining the highest level of confidentiality, professionalism, and ethics
Maintain documented procedures and follow industry best practices for conducting application, system, and malware testing
Contribute to helping others learn industry security tradecraft
Perform application and system vulnerability assessments across the enterprise
Monitor overall it security operations effectiveness
Assist with incident response and potential breach activities, on a 24x7 schedule, if necessary
Perform code reviews across a variety of programming languages and business units
Performing assessments of system development life cycle (sdlc) processes
Developing test scripts and procedures to support the program’s tactical and strategic initiatives
Other security-related projects that may be assigned according to skills
Required qualifications:
Candidates for this role must have direct experience with the following:
Minimum of 2+ years work experience in application security
Minimum education requirement of b.sDegree in computer science or equivalent work experience
Strong ethics and understanding of ethics in business and information security
Experience performing code reviews
Experience in or strong understanding of software development / writing coding
Experience remediating vulnerabilities with business partners
Knowledge of owasp tools and methodologies
Understanding of java, c# and other web programming languages
Understanding of scripting languages such as: python, go, angularjs
Knowledge of secure system configurations for both windows and linux platforms
Knowledge of how to secure and configure webserver technologies such as apache, iis, tomcat etc.
Ability to complete tasks and deliver professionally written and oral reports to clients at all levels of the organization
Possess current security certifications (e.g., csslp, cass, oswe)
Participate and contribute to enterprise security breach response activities; 24x7 schedule, if necessary
Collaborate with both internal and external partners to develop and update security operations standards, procedures, guidelines, and best practices
Developing and reporting of key information, metrics, security performance, and driving enterprise processes
Excellent communication, collaboration, and strong project management skills
The ability to obtain a government clearance
Additional skills:
Experience working with malware and applying reverse engineering techniques
Experience with web application vulnerability scanning tools (e.g., ibm appscan, hp webinspect, acunetix, burp suite pro, amongst others)
Experience with creating scripts (e.g., powershell, pearl, python, go)
Experience with application and system analysis tools (e.g., hp fortify, checkmarx, blackduck)
Experience with high level programming languages (e.g., java, c, c++, .net (c#, vb))
Experience with web application development (e.g., asp.net, asp, php, j2ee, jsp)
Understanding of container and automation technologies such as jenkins, puppet, chef, docker, kubernetes etc.
Relocation benefits: this position is not eligible for relocation assistance.
Full time employee benefits:
Health care benefits
401(k) with company match
Holiday pay
Paid time off (inclusive of a volunteer day)
Tuition reimbursement upon approval
Disclaimer: the above statements are intended to describe the general nature and level of work being performed by employees assigned to this classificationThey are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of employees assigned to this positionTherefore, employees assigned may be required to perform additional job tasks required by the manager.
We are proud to be an eoe minorities/females/protected veterans/disabled employerThe company’s status is a vevraa federal contractorRequest priority protected veteran referralsWe maintain a drug-free workplace and perform pre-employment substance abuse testing.
