Job description

Senior Analyst – Secure Development Life Cycle
USA - Virtual

Job Description and Requirements
Senior Analyst – Secure Development Life Cycle
Position Location: Virtual in the US
Position Type: W2- Hourly

About ioSENTRIX
ioSENTRIX is a leading security consulting firm based in the Washington DC Metro area. Our list of clients spans the fortune 500, large enterprises to small start-ups, financial institutions, and several high-tech companies. Our goal is to protect our clients by finding vulnerabilities before attackers do, and provide ramification guidance to ensure proper security. From web-application to Anti-virus; E-commerce apps to mobile games — we’re right there to secure them.

Summary

The Application Security Team (AppSec) manages the Secure Development Life Cycle (SDLC) throughout the IT organization. The Senior Analyst of SDLC will continuously execute and improve the SDLC governance process of in-house developed applications in a hybrid environment. The Senior Analyst will execute large multi-faceted projects to collaborate and work with various technology teams to ensure the security of the development life cycle meets the business requirements.

Essential Duties & Responsibilities

Performs a combination of duties in accordance with departmental guidelines:

• Seamlessly execute day to day responsibilities of process improvement and analysis on SDLC initiatives.
• Establish SDLC requirements framework with AppSec Leadership.
• Analyze and review proposed changes to the SDLC requirements framework.
• Support enterprise policy and technical standards with specific regard to SDLC and secure configuration.
• Successfully partner with other Security and IT professionals to support and enable strategies for developer experience.
• Act as a subject matter expert with the architecture and infrastructure teams during engagements and project meetings.
• Previous experience with Google Cloud Platform preferred.
• Build strong partnerships with technical teams to promote best practices for managing the SDLC in an agile manner and within cloud solutions.
• Understand business requirements and work with them to define appropriate solutions for security objectives while meeting the business need.
• Provide guidance, technical expertise, and support to team members regarding the SLDC framework.
• Participate and lead new projects as needed.

May perform additional duties as assigned.

Reporting Relationship

Typically Director or above

Skills, Knowledge & Abilities

1. Strong written and verbal communication skills with the ability to collaborate through all parts of the business.

2. High performance skillset which not only understands the threat spaces as it relates to risks, but also able to meet the technical challenge of communicating this out to our teams.

3. Leadership skills that bring out the best in the team. This includes both direct leadership but also cross-functional capabilities.

4. 4+ years of SDLC experience.

5. Ability to communicate at the senior leadership levels. Understanding how to translate technical gaps to business risk is critical for communication in this role.

6. Reporting gaps in a meaningful way that addresses a business risk as well as providing technical solutions to the operations teams in remediation is key.

7. Experience in interacting with auditors and regulators.

8. Experience in working across public cloud and on-premises hybrid infrastructure.

9. Self-starter with the ability to make independent decisions and the judgment to know when to seek guidance.

10. Fundamental understanding of risk vs severity.

11. Comfort in a diverse technology environment spanning multiple operating systems and architectures.

12. Ability to foster collaborative, open, working relationships with technology and other stakeholders.

13. Strong understanding of enterprise, network, system/endpoint, and application-level security issues and risks.

Education & Experience

1. Bachelor's degree in Computer Science, or related discipline, or equivalent work experience.

2. Typically a minimum of four years related work experience in Information Technology

Communication

• Written communication skills for use in preparing formal documentation
• Verbal skills that include the ability to clearly articulate thoughts and to deliver presentations
• Ability to persuade

Demeanor

• Enthusiasm and commitment along with professional interpersonal skills and an entrepreneurial drive
• Willingness to overlap working hours with the client’s timezone and ability test in off hours if requested by the client.

ioSENTRIX considers all applicants for employment without regard to race, color, religion, sex, gender preference, national origin, age, disability, or status as a Covered Veteran in accordance with federal law. In addition, ioSENTRIX complies with applicable state and local laws prohibiting discrimination in employment in every jurisdiction in which it maintains facilities. ioSENTRIX LLC. also provides reasonable accommodation to individuals with a disability in accordance with applicable laws.

Job Types: Full-time, Contract

Pay: $50.00 - $150.00 per hour

Benefits:

• Dental insurance
• Life insurance
• Vision insurance

Schedule:

• 8 hour shift
• Monday to Friday

Education:

• Bachelor's (Preferred)

Experience:

• Application Security: 2 years (Required)
• Information Security: 2 years (Preferred)
• Architecture Review: 1 year (Preferred)
• SAST and DAST: 1 year (Required)

Work Location: Remote

smogtown13.com is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, smogtown13.com provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, smogtown13.com is the ideal place to find your next job.