Associate, Information Security

Country: United States of America

The incumbent is responsible for detecting threats and vulnerabilities in target systems, networks, and applications by conducting systems, network and web vulnerability assessment / security testing. The Associate, Information Security identifies the security flaws and weaknesses in the systems that can be exploited to cause business risk, and provides crucial insights into the most pressing issues, suggesting how to prioritize security resources.

Develops, manages, and operates security services to assess, prioritize, and mitigate risks in containerized environments. Focuses on container security assessments, threat analysis, policy development, and incident response within application security. Works with development, operations, and security teams to ensure secure container lifecycle management. Designs security controls and automates security testing for containerized applications. Evaluates and recommends security tools and technologies to enhance container security posture. Engages with vendors for security solutions and implements best practices for container security.

• Conducts security assessments and vulnerability scans of container images, orchestrators, and runtime environments to identify potential risks and vulnerabilities.
• Monitors and analyzes container security threats and vulnerabilities, providing recommendations for mitigation and risk reduction.
• Collaborates with development, DevOps, and IT teams to integrate security best practices into the container lifecycle, from development to deployment.
• Develops and maintains scripts and tools for automated security testing and monitoring of container environments.
• Provides training and guidance to development and operations teams on container security best practices and emerging threats.
• Maintains comprehensive documentation of security assessments, findings, and remediation efforts.
• Assists in the investigation and response to security incidents involving containerized environments, providing detailed analysis and remediation recommendations.
• Develops and implements security policies, procedures, and best practices for containerized applications and infrastructure.

• Familiarity with container technologies such as Docker, Kubernetes, and OpenShift.
• Experience with security assessment tools and techniques for containers, such as AWS Inspector, SysDig, Clair, Trivy, or Aqua Security.
• Strong understanding of DevOps practices and CI/CD pipelines.
• Knowledge of cloud security, preferably in environments like AWS and Azure Platform.
• Excellent analytical and problem-solving skills.
• Strong communication skills, with the ability to convey complex security concepts to technical and non-technical audiences.
• Ability to work cooperatively in a team environment and independently manage tasks.
• Proven ability to understand and analyze complex issues and develop sound recommendations.