Security Analyst III

Key Responsibilities & Skills

• Application Security
• AI Security
• Vulnerability Management
• Secure Software Development Lifecycle (SDLC)
• Software Composition Analysis (SCA)
• Software Bill of Materials (SBOM) Management
• AI Bill of Materials (AI-BOM) Management
• Package & Dependency Management
• Container Image Scanning
• CI/CD Pipeline Security
• Open-source Software Governance
• AI Red Teaming
• Generative AI Security
• Prompt Injection Mitigation
• Retrieval-Augmented Generation (RAG) Security
• NIST Cybersecurity Framework (CSF) Compliance
• NIST AI Risk Management Framework (AI RMF) Compliance
• NIST Secure Software Development Framework (SSDF) Compliance
• OWASP Application Security
• OWASP API Security
• OWASP AI & LLM Security Guidance

Technical Skills

• Azure / Microsoft Azure
• Azure DevOps
• GitHub Enterprise / GitHub Copilot
• Microsoft AI Services / Copilot Studio
• Azure Databricks / MLflow
• AWS / Amazon Web Services
• Google Cloud Platform (Google Cloud Platform)
• CI/CD Tools
• Container Scanning Tools
• SAST Tools
• DAST Tools
• SBOM Generation Tools
• Artifact Repositories
• Container Registries
• Python

Education

Bachelor's Degree in Cybersecurity, Computer Science, Information Systems, Software Engineering, Computer Engineering, Electrical Engineering. Preferred: Master's in Cybersecurity, Master's in Computer Science, Master's in Information Security, Master's in Software Engineering, PhD in Computer Science, PhD in Cybersecurity.

Industry Experience

• Cybersecurity
• Cloud Security
• Application Security
• AI/ML Security
• DevSecOps
• Enterprise Software Development
• AI Governance
• SaaS Security