What are the responsibilities and job description for the Sr. Tester position at Donato Technologies, Inc?
Security Analyst - Expert-Level - Remote
Duration : 24 Months
Location : Remote
Mandatory Requirements.
A Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity or a related field.
At least 10 years of Information Security experience in specialized roles such as penetration testing, application development, and application security testing.
7-10 years in software development or IT security related fields.
3-5 years of experience as a Cloud Security architect or related position.
F ormal education in Computer Science, Information Systems, Engineering, Cybersecurity or a related field can be substituted for the following years of experience : Master's degree 1 year
Strong understanding of cloud computing technologies including, Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS).
Proficient in designing security controls, security tools needs / assessment and technology services.
Experience working with containerized and micro architecture platform as per the industry best practices.
Excellent understanding of securing SDLC, architecture design and IT operations, and integrating application security into CI / CD pipeline. Experience performing application security code and roles matrix review and practical risk assessments.
Experience working with threat modeling frameworks (e.g., STRIDE, MITRE ATT&CK, etc.).
Experience with common vulnerability management process including scanning, analyzing, reporting, remediation planning and tracking.
Experience working with application security testing tools such as dynamic application security testing, static application security testing, mobile application security testing, source code analysis, vulnerability management.
Experience with common networking tools (e.g., Wireshark, tcpdump, netcat).
Experience with security incident or breach investigation and development of strategies to respond to and recover from an incident or breach. Familiar with application vulnerability / security frameworks and standards such as OWASP, SANS, CVE, CWS, CVSS, etc.
Desirable :
Experience in a Health Exchange or its partners would be a plus.
CompTia Security , CISSP or other industry recognized certifications.
Experience with administering serverless, cloud-based enterprise applications and environments.
Experience and general understanding of object-oriented coding (Java, Python, .Net, etc.).
Understanding of core Internet protocols and routing (e.g., DNS, HTTP, HTTPS, TCP / IP, UDP, IPSEC, routing protocols, etc.).
Good understanding of security information and event management tools. Excellent understanding of emerging cybersecurity threats. It's desirable for Vendor's proposed Expert Level Resource to have experience with the following Software and Services :
Keep a pulse on the job market with advanced job matching technology.
If your compensation planning software is too rigid to deploy winning incentive strategies, it’s time to find an adaptable solution.
Compensation Planning
Enhance your organization's compensation strategy with salary data sets that HR and team managers can use to pay your staff right.
Surveys & Data Sets
What is the career path for a Sr. Tester?
Sign up to receive alerts about other jobs on the Sr. Tester career path by checking the boxes next to the positions that interest you.
