Search This Blog

February 8, 2023

C2C/Application Security Analyst w/d SAST and DAST Exp/Rancho Cucamonga, CA

Hi Partners,


Job Role - Application Security Analyst w/d SAST and DAST Exp

Location - Rancho Cucamonga, CA


Who are we looking for? Looking for application and security analyst  with minimum of total 3+ years of experience in conducting application and security tests against variety of technologies including web application, cloud, mobile and infrastructure as part of a team. Should be able to serve as a trusted advisor in helping customers with relevant decisions based on the findings of the reports and dashboards.

Technical Skills:

  • Conduct application and security assessment and penetration tests against variety of technologies including web application, mobile, cloud, as part of a team
  • 3+ years of working experience of Static and Dynamic Application Security Testing of web applications, web services, APIs and microservices including on cloud
  • Should be good in SAST and DAST, Application security, Devsecops etc.
  • Working experience and good understanding of application development, SDLC process and DevSecOps
  • Good knowledge of Static & Dynamic Application Security Testing tools
  • Good information security threat & risk-based prioritization abilities
  • Analyze vulnerability reports, segregate & prioritize the vulnerabilities, and do impact analysis, risk assessment, and identify false positives
  • Good foundation of common software vulnerabilities and their remediation/ mitigation techniques
  • Assist with determining and defining appropriate testing scope
  • Work collaboratively with a variety of internal stakeholders to deliver high quality penetrations tests
  • Provide reports which highlight and clearly articulate vulnerabilities and weakness to clients in terms they understand
  • Work within virtual teams of security and technical specialists to ensure quality delivery of leading security assurance services to our internal clients
  • Maintain a relevant skill with which to conduct penetration testing in the following domains:
  • Infrastructure
  • Application
  • Mobile (iOS, Android)
  • Code review
  • Work independently or as part of a team on penetration tests
  • Work with global team and external entities to deliver Security Assurance services
  • Analyze and review security issues identified
  • Supplement automated assessment techniques with manual security assessment approaches
  • Communicate security issues identified and mitigation/remediation options
  • Should be able to articulate technical concepts in plain words to non-technical community
  • Provide regular assessment progress updates that include sufficient detail to convey work completed and upcoming activities
  • Research new and emerging threats, counter controls, and technologies on various platforms
  • Pentesting skills and experience in application/infrastructure/mobile
  • Understanding of the security mechanisms associated with applications, Operating systems, Networks, Databases, Virtualization, and cloud technologies



Regards,


Purnima Mishra

VBeyond Corporation

IT Recruiter

E: PurnimaM@VBeyond.com | www.vbeyond.com