Web Application Security / SecOps Engineer
Jacksonville, FL, United States
100% Remote
Important Notes from Hiring Manager:
5+ years related work experience with a Bachelor's degree in an IT related field OR Equivalent (8+ years) IT, IT Infrastructure and/or Cybersecurity work experience.
Required Qualifications:
• Knowledge of information security principles, including risk assessment and management, threat and vulnerability management.
• Thorough knowledge of CI/CD pipeline (Jenkins).
• Experience with web application security assessments, vulnerabilities, and frameworks.
• Knowledge of dynamic and static code analysis. (DAST/SAST).
• Proficiency in scripting and automation using languages such as Python, Bash, or PowerShell.
Required Licenses and Certifications
Certified Ethical Hacker (CEH) certification (within 180 Days if converted to FTE)
Job Description:
The Cybersecurity Threat Analyst develops and implements a comprehensive information security program, including defining security policies, processes, and standards. They perform audit assessments and define processes and standards to ensure that security requirements are maintained (HiTrust, SOC2, Enhanced Direct Enrollment, Federally Facilitated Exchange).
Essential Functions
The essential functions listed represent the major duties of this role, additional duties may be assigned. Serves as a liaison with IT and application development partners to identify, understand, document, and advise on security requirements, impacts, risks, and vulnerability analysis. Collaborates closely with development teams to prioritize and remediate identified security issues. Develops and maintains documentation for security systems, procedures, and security diagrams. Analyzes, proposes, and implements solutions concerning residual risk, vulnerabilities, and other security exposures. Participates on IT projects to ensure that security issues are addressed throughout the project life cycle. Participates in initiatives to identify, select, and implement technical controls. Develops information security processes, policies, and procedures. Serves as a liaison and lead on audit-related initiatives, collection of data, progression tracking, assessment, and remedial activities. Conducts web application vulnerability assessments using industry standard tools (DAST/SAST). Other duties as assigned.
Required Work Experience
5+ years related work experience.
Required Education
Bachelor's degree in an IT related field or equivalent IT, IT Infrastructure and/or Cybersecurity work experience.
Required Licenses and Certifications
Certified Ethical Hacker (CEH) certification (within 180 Days if converted to FTE)
Required Qualifications:
• Knowledge of information security principles, including risk assessment and management, threat and vulnerability management.
• Thorough knowledge of CI/CD pipeline (Jenkins).
• Experience with web application security assessments, vulnerabilities, and frameworks.
• Knowledge of dynamic and static code analysis. (DAST/SAST).
• Proficiency in scripting and automation using languages such as Python, Bash, or PowerShell.
Additional Preferred Qualifications:
• Knowledge of security standards and frameworks (HiTrust, SOC2).
• Experience developing, documenting, and maintaining security procedures.
• Knowledge of the software development life cycle.
• In-depth knowledge of operating systems and security applications, as well as a working knowledge of basic network protocols and tools.
• Proven ability to work under stress in emergencies with flexibility to handle multiple high-pressure situations simultaneously.
• Ability to communicate highly complex technical information clearly and articulately for all levels and audiences.
• Ability to manage tasks independently and take ownership of responsibilities.
• Strong customer focus with ability to manage customer expectations and experience and build long-term relationships.
• Strong team-oriented interpersonal skills with the ability to interface with a broad range of people and roles including vendors and IT-business personnel.
• Ability to adapt to a rapidly changing environment.
• High critical thinking skills to evaluate alternatives and present solutions that are consistent with business objectives and strategy
EEO:
"Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of - Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans."