Analyst Information Security

Key responsibilities include:

• Onboarding servers and applications to enterprise vulnerability scanning platforms.
• Executing and managing SAST, DAST, and IAST security assessments.
• Conducting secure code reviews and validating remediation of identified vulnerabilities.
• Supporting DevSecOps integration within CI/CD pipelines to enable automated security controls.
• Tracking, reporting, and driving closure of application and infrastructure security findings.
• Working with development, infrastructure, and cloud teams to ensure secure-by-design implementation.
• Supporting regulatory, audit, and compliance requirements through continuous security assurance activities.
• Support MBSS scanning for infrastructure systems including OS, network devices.

• 2-3 years of experience in Vulnerability Assessment and Security Scanning of servers and applications.
• Hands-on experience with SAST, DAST, IAST, and Open Source Dependency Scanning tools.
• Knowledge of Secure Software Development Lifecycle (SSDLC) and secure coding principles (OWASP Top 10, CWE, SANS Top 25).
• Experience in security onboarding of applications and servers to enterprise security tools.
• Ability to perform secure code reviews and validate remediation of vulnerabilities.
• Understanding of CI/CD pipelines and integration of security controls within DevSecOps workflows.
• Familiarity with Linux, Windows, Web Applications, APIs, and Cloud environments.
• Experience in vulnerability tracking, reporting, and risk remediation coordination.