IT Security Auditor

Introduction:

This position is not a member of the Security Operations Center, rather it is dedicated to working with software development teams on secure coding practices. Candidates must have a strong development background.

Responsibilities:

• Work closely with software development teams to ensure secure coding practices
• Utilize Application Security scanning tools such as SAST, DAST, SCA, ASOC, Container/Cloud
• Analyze HTTP Request/Response headers for web and Restful API calls
• Explain in detail any of the OWASP top 10 vulnerabilities
• Identify and address Cross Site Scripting, Injection attacks, SSRF, CSRF, XML entity, etc.

Requirements:

Required Skills:

• Experience with Application Security scanning tools (SAST, DAST, SCA, ASOC, Container/Cloud)
• Knowledge of HTTP Request/Response headers for web and Restful API calls
• Ability to explain in detail any of the OWASP top 10 vulnerabilities
• Familiarity with Cross Site Scripting, Injection attacks, SSRF, CSRF, XML entity, etc.

Preferred Skills:

• Experience in a Security Operations Center
• Industry certifications such as CISSP, CISA, or CEH
• Knowledge of network security protocols and technologies
• Strong communication and collaboration skills