Application Security Analyst II

Description

Job Description:

Next stop – Leidos. Leidos is working with our NOAA customer to transform their Security Operations Center into an industry leading organization. As a part of a multi-year initiative, we are modernizing our IT infrastructure, implementing industry-leading cyber technologies, and transforming how analysts think and handle threats. Here, you will put your cyber security prowess in action and provide senior-level subject matter expertise as an Application Security Analyst. This person will work across teams and departments to identify security vulnerabilities, analyze/verify those vulnerabilities, and work with the appropriate software engineering team to remediate the vulnerability. Your experience, knowledge, and understanding of standards and tools like: OWASP, Threat Modeling, GitHub repo scanning, and many more will build the foundation for a safe and secure software practice. You will provide direction and management of cyber initiatives. Join our team in Fairmont, WV or Boulder CO and watch your career grow with Leidos.

Responsibilities:

• Provide technical direction and mentor junior and mid-level employees
• Act as the go-to person for technical recommendation
• Set and enforce the standard for effective cyber operations
• Respond to cyber incidents through detection, investigation, analysis, remediation, and reporting of cybersecurity incidents
• Perform code reviews using Static and dynamic code scanning tool sets across a variety of programming languages and business units.
• Establish secure coding standards and help business units adhere to them.
• Support core hours but also 24x7 shifts when coverage is needed in rare situations.
• Developing test scripts and procedures to support the program’s tactical and strategic initiatives.
• Assist and ensure secure coding best practices are being applied and enforced.

Required Skills:

• 3-5 years of programming or application security experience.
• Proficiency in 3 or more programming languages.
• Familiarity in analyzing network packets, SIEM alerts, and server and application logs to investigate incidents for anomalous/malicious activities.
• Proficient in OWASP vulnerabilities and remediations.
• Have one of the following certifications: GWEB, GWAPT, Additional certifications at or above the level of this listing may also be accepted.
• Experience performing code reviews.
• Experience in or strong understanding of software development / writing coding.
• Experience with web application vulnerability scanning tools.
• Experience working with malware and applying reverse engineering techniques.

Preferred Qualifications:

• B.S. degree in Computer Science with 2 - 4 years of prior relevant experience, or related work experience.
• Experience tracking incidents against a framework such as MITRE ATT&CK or Cyber Kill Chain methodology.
• Inquisitive, problem-solving oriented.
• Can-do attitude with a strong sense of ownership.

Clearance:

• Must be a US Citizen.
• Minimum fully adjudicated Secret and Interim Top Secret clearance.

Location:

• Fairmont, WV
• Boulder, CO

Pay Range: