What are the responsibilities and job description for the Cyber Security Applications Security Analyst position at PingWind?
Location: Fort Knox, KY
Required Clearance: Secret
Required Certifications: DoD 8570 Information Assurance Technical Level II (IAT Level II) Certification required. Must be IAT-III within 180 days of employment (CISSP Certification, CCNP-Security, CASP, or similar certifications.
Required Education: Bachelor’s degree in Information Technology, Computer Science, or related field
Required Experience: Demonstrated minimal five (5) years’ recent equivalent experience, with a major in a field that provides substantial knowledge in development background,
Position Description:
PingWind is seeking a Cybersecurity Application Security Analyst who is responsible for ensuring the security of software applications across the development lifecycle. This role focuses on identifying vulnerabilities, implementing secure development practices, and collaborating with teams to mitigate risks, ensuring applications meet security standards.
Primary Responsibilities:
Typical Responsibilities/Tasks:
• 5-10 years of web application development related work experience.
• Development background is required.
• Microsoft .NET or C# development experience required.
• Knowledge of SDLC methodologies.
• Intermediate to advanced knowledge of secure code development practices and OWASP Top 10 web application security issues.
• Web services development and design with integrated security engineering experience.
• Experience with supporting assessment of IT systems compliance with Federal IT Security standards. (NIST 800-53, FISMA, etc.)
• Experience performing manual and automated code review and penetration tests for complex applications.
• Experience with static code scanning tools (Fortify, AppScan, etc.)
• Technical understanding of database, web server, and operating system security.
• Knowledge of security systems and controls, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc.
• Understanding of data handling privacy standards to include PII and PHI.
• Familiarity with DISA application security related Security Technical Implementation Guides (STIGs).
• Veterans with prior Army/DoD Cybersecurity experience highly desired.
• Conduct threat modeling and risk assessments for new and existing applications.
• Collaborate with developers and DevOps teams to integrate security into the software development lifecycle (SDLC).
Other Duties:
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.
Required Qualifications
• Security
Desired Qualifications
• Master’s Degree
• CISSP)
About Pingwind
PingWind is focused on delivering outstanding services to the federal government. We have extensive experience in the fields of cybersecurity, development, IT infrastructure, supply chain management and other professional services such as system design and continuous improvement. PingWind is SBA certified Service-Disabled Veteran-Owned Small Business (SDVOSB) with offices in Northern Virginia and Huntsville Alabama. www.PingWind.com
Our benefits include:
· Paid Federal Holidays
· Robust Health & Dental Insurance Options
· 401k with matching
· Paid vacation and sick leave
· Continuing education assistance
· Short Term / Long Term Disability & Life Insurance
· Employee Assistance Program through Sun Life Financial EAP Guidance Resources
Veterans are encouraged to apply
PingWind, Inc. does not discriminate in employment opportunities, terms and conditions of employment, or practices on the basis of race, age, gender, religious or political beliefs, national origin or heritage, disability, sexual orientation, or any characteristic protected by law
