Application Security Associate​/Analyst

The Federal Reserve Bank of Cleveland is a mission‑driven organization committed to fostering stability in the nation’s monetary and financial systems. This role supports the Department of Treasury’s Bureau of the Fiscal Service, protecting the confidentiality, integrity and availability of web and mobile applications built by the Cleveland Pay.gov, Debit Gateway, TCMS/DVS, CIR, eCommerce and future business lines.

To be considered for this role, candidates must be a U.S. citizen.

• Identify security-related issues and define security requirements during all phases of the application development lifecycle.
• Review program/development documents to ensure adherence to secure coding standards, guidelines and security requirements.
• Coordinate with developers to ensure secure and resilient design, prototyping, development, testing, support, and documentation of moderately complex application software.
• Monitor for atypical usage of information system accounts and other abnormalities to identify possible breaches.
• Assist with FISMA initiatives, e.g., updating security plans, to support ISSO responsibilities.
• Coordinate the identification of security-related issues and definition of security requirements during all phases of the software development lifecycle (SDLC).
• Perform penetration testing activities to ensure web vulnerabilities are not present within Treasury Services applications.
• Conduct analysis and interpret cybersecurity trends and emerging risks, quantify potential impact, and develop conclusions and recommended application security responses.
• Perform other duties as assigned or requested.

• Associate’s degree and 2 years of related work experience.
• Bachelor’s degree and no prior related work experience.

• Associate’s degree and 5 years of related work experience.
• Bachelor’s degree and 3 years of related work experience.
• Master’s degree and 0‑1 year of related work experience.

• Ability to analyze highly complex business requirements.
• Thorough understanding of industry-based security controls relating to applications, services, and systems.
• Knowledge of cloud-based platforms and technologies.
• Thorough understanding of security controls relating to access control, authentication, and auditing.
• Demonstrated knowledge and understanding of information security industry trends and emerging technologies, especially relating to application security vulnerabilities.
• Proficient at testing web applications for security vulnerabilities, such as those listed in the Open Web Application Security Project (OWASP) Top 10, and familiar with the tools used for testing.

Location:

Cleveland, OH

Expected starting salary range: $73,400 – $91,800 for Application Security Associate; $81,600 – $102,300 for Application Security Analyst.

Benefits:
The Cleveland Fed offers benefits that support overall health and financial security.

Jobs such as this may include responsibilities, duties, and working conditions that are essential to the role. The Federal Reserve Bank of Cleveland reserves the right to revise this description at any time.

The Federal Reserve Bank of Cleveland is committed to ensuring that individuals with disabilities are provided with reasonable accommodation to participate in the job application or interview process, perform essential job functions, and receive other benefits and privileges of employment.

The Federal Reserve Banks are committed to equal employment opportunity for employees and job applicants in compliance with applicable law and to an environment where employees are valued for their differences.