Application Security Analyst

Location: Poway, CA 92064 Employment Type: Full Time, Employee Pay Rate: 90.00 - 110.00 USD /year Reference Code: 0000000000 APPLY BY E-MAIL!Subject: Application Security Analyst Job description: Summary: The Application Security Analyst is responsible for ensuring the development of secure internet-based applications by interacting with software developers, QA testers, and business analysts throughout the software development lifecycle. The Application Security Analyst will be responsible for the following: ** Performing application risk assessments and threat modeling ** Administering application vulnerability scans and coordinating remediation activities ** Manage and configure application firewalls ** Manage and configure database assessment and auditing tools ** Provide training to IT department on application security best practices ** Ensure application compliance to corporate, federal and state, and bureau requirements Knowledge and Skills Required (including Computer skills): 1. Prior experience in a software development role using one or more of the following languages: ASP.NET (C#.NET or VB.NET), Java, C#, C++ 2. Strong knowledge in Windows and/or UNIX required. 3. Hands-on experience with AppScan or other application vulnerability scanner. 4. Hands-on experience with IMPERVA or other web application firewall. 5. Must be very familiar with risk analysis and risk management methodologies. 6. Solid understanding of application vulnerabilities and countermeasures. Must be able to provide and recommend remediation approach and not just provide vulnerability information. 7. Must have working knowledge of PKI and key management, as well as using common encryption libraries. Experience with column-level encryption solutions a plus. 8. Familiarity with major regulations such as Sarbanes-Oxley and CA Privacy Law SB 1386 a strong plus. 9. Solid understanding of network and system security processes. 10. Excellent Communication Skills (both oral/written); documentation requirements are: exceptions reports, audit/review reports, technical/process recommendations, reporting of security statistics/metrics, technical standards, procedures, and guidelines, etc.). 11. Demonstrated ability to work effectively in a fast-paced, high volume, deadline-driven environment. 12. Professional maturity in dealing with all levels of management and staff.Education and Work Experience: Four-year Degree in Computer Science or related field 3+ years experience in a software development role using one or more of the following languages: ASP.NET (C#.NET or VB.NET), Java, C#, C++At least one year in a dedicated application security role Professional security certifications a plus: CISSP, CISA   Contact: PLEASE E-MAIL RESUMES TO: Apply by Email