Information Security Analyst - Code and Vulnerability Analysis

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Stafford Gray LLC, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Information Security Analyst - Code and Vulnerability Analysis at Stafford Gray LLC plays a critical role in safeguarding the organization’s information systems. This position involves analyzing and reviewing code for security vulnerabilities, providing recommendations for mitigation, and collaborating with development teams to enhance the security posture of applications. The analyst will also conduct regular security assessments and audits to ensure compliance with best practices, thereby protecting the company’s assets and sensitive information from potential threats.

Job Responsibilities

• Conduct code reviews to identify security vulnerabilities in software applications.
• Perform static and dynamic application security testing.
• Collaborate with development teams to fix identified vulnerabilities and reinforce secure coding practices.
• Develop and maintain documentation on security findings and remediation efforts.
• Monitor and analyze security trends and threats affecting software development.
• Conduct security training for developers on secure coding techniques.
• Assist in the development and implementation of security policies and procedures.
• Participate in incident response activities related to application security breaches.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 3 years of experience in information security, with a focus on code and vulnerability analysis.
• Strong understanding of secure coding practices and application security methodologies.
• Experience with security testing tools such as static and dynamic analysis tools.
• Familiarity with programming languages such as Java, C#, Python, or similar.
• Certifications such as CEH, CISSP, or OSCP are highly desirable.
• Excellent analytical and problem-solving skills, with a keen attention to detail.
• Strong communication skills, capable of bridging gaps between technical and non-technical stakeholders.

Technologies & Tools

The Information Security Analyst will utilize various technologies and tools to perform vulnerability assessments and analyses. This includes secure coding practice frameworks, static and dynamic application security testing tools (SAST and DAST), intrusion detection systems (IDS), and code repositories integrated with security scanners. Familiarity with CI/CD tools and DevSecOps practices will also be beneficial for streamlining security within the development lifecycle.

Ideal Candidates

The ideal candidate will demonstrate a proactive approach to cybersecurity challenges and a deep commitment to safeguarding the organization's assets. They should possess strong analytical skills, an aptitude for problem-solving, and an unwavering attention to detail. A passion for continuous learning and professional growth within the information security field is essential. Additionally, excellent interpersonal skills to foster collaboration among cross-functional teams and a strong ethical foundation to make sound security decisions will make an applicant particularly well-suited for this role.