Analyst, Application Security

As an ICE IS Application Security Analyst, your role involves ensuring that ICE produces and maintains secure applications. You will be responsible for influencing secure design, performing code analysis, identifying vulnerabilities through hands-on penetration testing, assisting developers in remediation efforts, and communicating findings to developers, QA teams, and management. Key Responsibilities: - Operate the Application Development Security Lifecycle from design review through automated and hands-on testing. - Maintain and contribute to Application Development Security Policies and standards by staying updated with industry trends and publications from organizations such as NIST, OWASP, and SANS. - Work with development teams to establish security requirements early in the SDLC and provide security subject matter expertise during the development of new projects and releases. - Focus on automation while implementing, maintaining, and integrating cutting-edge technologies to assess an application's security with tools like static code analyzers (SAST), dynamic testing (DAST) tools, software composition scanners, Web Application Firewall (WAF), and bug bounty programs. - Keep software engineers informed of secure coding practices through training sessions, one-on-one education, Intranet blogs, and other opportunities. Qualifications Required: - Software engineering experience in Java, C++, .NET, or related languages. - Expertise in deploying, configuring, and using SAST, DAST, and Software Composition in large environments. - Experience in designing solutions to integrate transparently with the CI/CD pipeline. - Familiarity with application development in large cloud environments. - University degree in Computer Science, Engineering, MIS, CIS, or related discipline. Desirable Knowledge and Experience: - Seniority in the role will be determined by experience and demonstration of exceptional competencies, including documenting and publishing technology guidance and repeatable processes, mentoring peers, improving processes, introducing superior technology, and taking initiative to learn business goals and identify ways to increase productivity in other ICE groups and offices.,