Information Security Analyst - Code and Vulnerability Analysis

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Argyll Infotech Enterprise Pvt Ltd, so some details may not match this job. The employer's own page has the real description.

Position Overview

As an Information Security Analyst focusing on Code and Vulnerability Analysis at Argyll Infotech Enterprise Pvt Ltd, you will play a critical role in safeguarding the integrity and security of our software and systems. You will be responsible for identifying, analyzing, and documenting security vulnerabilities concerning code while implementing best practices in secure coding methodologies. This role requires continuous collaboration with development teams to ensure adherence to security protocols and to conduct thorough assessments that help mitigate risks associated with vulnerabilities within our applications.

Job Responsibilities

• Conduct comprehensive code reviews and static code analysis to identify security vulnerabilities.
• Collaborate with development teams to implement secure coding practices and enforce security controls.
• Execute vulnerability assessments and penetration testing to assess the security posture of applications.
• Document findings and provide actionable remediation recommendations to technical teams.
• Participate in security incident response activities and assist in investigations of security breaches.
• Stay abreast of the latest security threats, vulnerabilities, and industry trends to enhance security measures.
• Contribute to the development and maintenance of security standards, guidelines, and policies.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 2-4 years of experience in information security or a similar role focused on code and vulnerability analysis.
• Strong understanding of secure coding practices and familiarity with various programming languages such as Java, C#, or Python.
• Experience with security tools for static and dynamic analysis, such as Fortify, Checkmarx, or SonarQube.
• Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or Certified Secure Software Lifecycle Professional (CSSLP) are preferred.
• Excellent analytical and problem-solving skills with keen attention to detail.
• Strong communication skills, both verbal and written, to effectively convey security concepts to technical and non-technical stakeholders.

Technologies & Tools

In this position, you will utilize various technologies and tools to support your analysis and assessments. This includes but is not limited to static and dynamic application security testing tools (SAST and DAST), threat modeling tools, and vulnerability assessment platforms. Familiarity with version control systems such as Git and continuous integration/continuous deployment (CI/CD) tools is also essential for integration into the development process.

Ideal Candidates

The ideal candidate for the Information Security Analyst - Code and Vulnerability Analysis position is someone who possesses a combination of technical expertise and a proactive mindset. They demonstrate a strong commitment to security and a passion for staying updated with the evolving threat landscape. A collaborative individual who can build strong relationships with development teams and communicate security concepts effectively will excel in this role. Additionally, possessing a strong analytical mindset and the ability to think critically will be essential for identifying vulnerabilities and recommending effective measures.