Information Security Analyst

We are seeking an experienced Information Security Analyst with 5+ years of experience in application security, source code analysis, and vulnerability management. The role focuses on analyzing security scan results, identifying code vulnerabilities, prioritizing remediation efforts, and collaborating with development teams to strengthen application security.

• Analyze code scan results from Veracode and Sonar Qube and identify security vulnerabilities.
• Perform manual code reviews, security audits, and vulnerability assessments.
• Assess security risks and prioritize remediation based on severity and business impact.
• Convert security findings into actionable user stories and tasks in Jira, following SAFe practices.
• Develop and maintain security policies, procedures, and best practices in Confluence.
• Monitor remediation progress and validate fixes through subsequent code scans.
• Collaborate with development teams to implement secure coding practices.
• Provide regular security status reports and progress updates to the Information Security Manager.
• Identify security risks in third-party libraries and application dependencies.
• Support application security improvements across development and deployment processes.

• Minimum 5+ years of experience in Information Security, Application Security, or Vulnerability Management.
• Strong experience in manual code audits, code reviews, vulnerability analysis, and remediation.
• Hands‑on experience with Veracode and Sonar Qube for code scanning and security assessments.
• Strong knowledge of Java programming and secure coding practices.
• Knowledge of OWASP Top 10, CERT/CC, MITRE, Sun, and NIST security standards and guidelines.
• Experience with Atlassian tools, including Jira, Service Desk, and Confluence.
• Understanding of authentication, authorization, session management, and secure communication protocols.
• Experience with Windows and Linux operating systems.
• Experience working with Oracle and Microsoft SQL Server databases.
• Knowledge of third‑party library security analysis and vulnerability identification.
• Strong analytical, troubleshooting, communication, and collaboration skills.

• Certifications such as CISSP, CSSLP, or CEH.
• Experience with automated security testing tools and CI/CD pipelines.
• Knowledge of Python, C++, or C#.
• Familiarity with cloud security practices and securing cloud-based applications.

• Application Security and Vulnerability Management
• Veracode and Sonar Qube
• Java and Secure Code Review
• OWASP Top 10, CERT/CC, MITRE, and NIST
• Jira, Service Desk, and Confluence
• Oracle and Microsoft SQL Server
• Windows and Linux
• Third-Party Library Security Analysis
• CI/CD and Automated Security Testing