Overview

This position supports the Information Security Vulnerability Management's Application Security program within the Bank at an advanced level of ability. We are looking for Analysts who have an extensive background in Application Security including experience in DAST/SAST, SCA, and pipeline integration. This analyst should be able to present to leadership on findings and describe the identified risk.

Responsibilities

• Working directly in Application Security tools and integrations with these tools
• Assist in the maturing the Application Security program; implementing new initiatives and expanding existing scope
• Work with application teams to appropriately disposition findings; having the experience and knowledge to properly identify false positives from valid findings, defending valid findings when necessary, providing remediation guidance
• Preparing reporting and metrics for Application Security
• Participate in Daily Cyber Ops standup calls
• Maintaining process documentation
• Supporting audits and exams
• Stay current with vulnerability information across all the products in the environment
• Hours - MST/PST