Sr. Security Analyst/Engineer

A. Job Qualifications Necessary:

• Education: Bachelor's degree in Cybersecurity, Computer Science, Information Security, or a related field

• Experience:
• 5+ years of experience in information security, including roles as a Security Analyst and/or Security Engineer.
• Experience with secure coding practices, code reviews, and security testing.
• Experience with static and dynamic code analysis tools.
• Experience with CI/CD pipelines and integrating security into DevOps processes.
• Certifications: Relevant certifications such as CISSP, CEH, OSCP, or similar.
• Skills:
• Strong understanding of security principles, protocols, and best practices.
• Proficiency in security tools and technologies (e.g., Wiz, SonarQube, vulnerability scanners).
• Knowledge of regulatory requirements and industry standards (e.g., GDPR, ISO 27001, SOC2).
• Familiarity with the OWASP Top 10 vulnerabilities and mitigation strategies
• Understanding of NIST cybersecurity standards and frameworks (e.g., NIST CSF, NIST SP 800-53)
• Excellent analytical and problem-solving skills.
• Strong communication and collaboration skills.
• Ability to work independently and as part of a team.